Re: SRX 110 HTTPS sites not loading
Old thread, but still relevant. This worked for me today too, SRX 110H, in UK. PPPoA via Demon Internet (yes they're still going - for older, UK-based users).
View Articleload sharing default routes vs rpm probe and ip monitor
I was kind of baffled by a S2J translation of two seperate default routes that combined into one.. Having two with seperate preferences was intended to work with track-ip, but now I'm not sure what it...
View ArticleRe: Site-to-Site IPSec VPN Dropping at Soft Lifetime
Hi joses, Thanks for responding! It's an SRX-240 running JunOS version 12.1R3.5. The SRX is the initiator for all tunnels. vpn-monitor and DPD is not configured on either side. They are all...
View ArticleRe: load sharing default routes vs rpm probe and ip monitor
Hello , I see that we have 2 situations and I am not clear about what exactly is your requirment so I will explain them both . 1) If you are looking load balancing , then YES you need 2 default routes...
View ArticleRe: Site-to-Site IPSec VPN Dropping at Soft Lifetime
Hello , This issue seems to be matching a PR : PR 788550 [Confidential] - VPN Drops Intermittently Between SRX and SSG But this was reported in 11.4 version and fixed on versions above 12.1 . But we...
View ArticleRe: Question about routings!!
Joses, but how do I assign multiple IP to a single interface? I need to know how to use 5 IP in the same interface and how can use filter based routing per IPThat's my problem, I saw how to do Filter...
View ArticleRe: Question about routings!!
Hello Marc , You can configure multile IPs in same interface , thats not a problem .Eg : ge-0/0/3 { unit 0 { family inet { address 1.1.1.1/24; address 1.1.1.2/24; address 1.1.1.3/24; address...
View ArticleExample of granular traffic control in dynamic VPNs
Hi everybody,I just wanted to share little implementation of dynamic vpns on the branch SRX cluster that I did lately.The case here was to have granular control over to what services and subnets...
View ArticleRe: load sharing default routes vs rpm probe and ip monitor
sweet! thank you for clearing it up.. I guess in a way I figured it out but I still was not 100% sure I got it correct (I stumbled upon someone elses example that just happened to appy). S2J conversion...
View ArticleClik here to view.
vSRX IPv4/IPv6 - Example needed
Hi everybody, could you give me an example how to realize my drawing?I want to play with IPv6 but unfortunately my Provider has only IPv4...I don't have access to the Devices in light blue. Do I need...
View ArticleBetreff: Allow IP Protocols
Thank you very much for your help. The Rules I created were enough to get it done.I could see the traffic passing the SRX - the Problem was a routing issue at the Customers site.
View ArticleIs an SPC card failure graceful?
Dear all, Just wondering if anyone has any experience of an SPC card failure in a high end (3400) standalone SRX? Just wondering if the effect is essentially reduced capacity until the card is...
View ArticleRe: CoS prioritized Citrix/ICA through VPN
He does specify it the first window:firewall { family inet { filter CLASSIFY-ICA { term MATCH-ICA-AND-CGP { from { destination-port [ 2598 1494 ]; } then { forwarding-class INTERACTIVE-QUEUE; accept; }...
View ArticleRe: vSRX IPv4/IPv6 - Example needed
You can muck around with NAT but I would just use a tunnel broker like Hurricane Electric.
View ArticleRe: VDSL G.993.5 (G.vector) and G.INP support on SRX 110VA and VDLS PIM
Thank you for your replay. THere is another thead in tis forum about G.Vector http://forums.juniper.net/t5/SRX-Services-Gateway/VDSL2-Interface-on-SRX-PIM-or-SRX110/m-p/247638/highlight/true#M30444...
View ArticleRe: Is an SPC card failure graceful?
According to the install instructions, you have to power down the SRX3400 to install the SPC. So they appear not to be hot swappable....
View ArticleRe: vSRX IPv4/IPv6 - Example needed
If you want to try the the NAT configuration this would be the same for an IPv6 to IPv4 connection like you describe....
View ArticleHow to configure dual ISP balancing with failover?
Hi everyone, First of all, sorry for my bad english, I hope to explain well... I have 2 ISP links in my SRX220 and I need to have balancing between those links, and when some of the links falls, all...
View ArticleRe: How to configure dual ISP balancing with failover?
I believe this is the sample configuration you would be looking for using Dual ISP with failover detection. For the probe addresses to detect failure of the ISP, I generally use the ISP DNS server...
View ArticleSRX100 meltdown...
Good morning.This just started happening to me with 1 of my SRX100's (brand new, H2, etc.) It has 1 ipsec tunnel, NAT, nothing special that an SSG5 can't do. But it comes with the added benefit of...
View Article