Re: Issues with connecting SRX210 to BT Broadband
As I am now remembering the hughesnet modem also was a gateway. It had an internal ip too. 192.168.0.1 . It compensated for a second gateway. Hughesnet has this ability. I gained full access by setting...
View ArticleRe: Issues with IPSEC when one side is Dynamic
ssn wrote:Hi, From what you have informed it seems there is some issue with rekeying, after the VPN is established initially.Could you share the output of the below command with respect to this...
View ArticleRe: Issues with IPSEC when one side is Dynamic
Nellikka wrote:Hi, Try to disable DPD at Static SRX side. Thanks for the suggestion. Just gave that a shot on both sides separately and then removing from both sides at the same time with no luck.
View ArticleRe: Issues with IPSEC when one side is Dynamic
If I go into the config on both sides and change the mode from aggressive to main and change the local-identity of the dynamic side to its current IP the tunnels establish immediately and work...
View ArticleRe: Issues with IPSEC when one side is Dynamic
I think you are mixing the two dynamic id patterns you need to use the same on both the local and remote and they should match. Or at least that is how I got these to work in the past. Static...
View ArticleFree Space Issue when trying to upgrade SRX110H1 via USB
Hi guys, I have tried to load an imagefile/config via USB to a SRX110H1.But the process abort: da0 at umass-sim0 bus 0 target 0 lun 0 da0: <SanDisk Cruzer Blade 1.26> Removable Direct Access...
View ArticleRe: Free Space Issue when trying to upgrade SRX110H1 via USB
Have you seen this list of safe files to delete? https://kb.juniper.net/InfoCenter/index?page=content&id=KB19466 I also look for core dumps and check the /var/tmp and all the user home directories....
View ArticleRe: Free Space Issue when trying to upgrade SRX110H1 via USB
Hi, it seems the system-snpashot on the backaup-partition (created via request system snapshot slice alternate) is one reason regarding the storage-issue.But there is no command on a SRX110 for...
View ArticleRe: Issues with IPSEC when one side is Dynamic
spuluka wrote:I think you are mixing the two dynamic id patterns you need to use the same on both the local and remote and they should match. Or at least that is how I got these to work in the past....
View ArticleSRX 1500 Packet trace not working as expected
Hi, I have the topology as showing here https://imgur.com/a/xB09y . I need to prove to my supplier which I connect through via reth2.0 that traffic is leaving my device correctly. To do this I want to...
View ArticleRe: Free Space Issue when trying to upgrade SRX110H1 via USB
Please try below command to list files by their size and see if there are files you could delete.start shell du -ah /cf | sort -n -r | moreRegards, Wojtek
View ArticleLot of discards between SRX and HP switch
Hello, Does anybody have an idea why i get massive discards between a SRX 300 and a HP (1910, 1810) switch ?I have the same setup on multiple locations and on all these locations the same issue...
View ArticleRe: SRX 1500 Packet trace not working as expected
State: Backup from show security flow sessions output means it's form secondary node. As secondery node doesn't pass traffic counters show 0. It's ok.Packet capture configuration looks fine. What Junos...
View ArticleRe: Lot of discards between SRX and HP switch
Few expamples of traffic that will be logged as discards are:- packets destined to IP that SRX doesn't know how to route (including multicast)- packets destined to IP that SRX have static route with...
View ArticleRe: Lot of discards between SRX and HP switch
Do you have any firewall filter configured with action discard? Also, check if you have a static route with discard? Check the KB here: https://kb.juniper.net/InfoCenter/index?page=content&id=KB9262
View ArticleRe: SRX 1500 Packet trace not working as expected
Are you getting any traffic for output of "run monitor traffic interface reth2"?
View ArticleRe: SRX 1500 Packet trace not working as expected
Strange why its showing the backup then? JUNOS 15.1X49-D60.7 built 2016-09-13 23:16:14 UTC
View ArticleRe: SRX 1500 Packet trace not working as expected
When I run 'monitor traffic interface reth2', I don't see the traffic I'm sending but there is stuff going on like below. The strange thing when I run the same command at the site where its all fine I...
View ArticleRe: Free Space Issue when trying to upgrade SRX110H1 via USB
Looking closer I see that deleting snapshots only seems to be high end SRX models so you will need to find other files to remove.
View ArticleRe: Issues with IPSEC when one side is Dynamic
The main point is that both the remote and hub SRX must have both the local and remote identity configurations. And they are the reverse of each other and matching: local hub = remote dynamic local...
View Article