Quantcast
Channel: All SRX Services Gateway posts
Browsing all 17645 articles
Browse latest View live

Re: Is there any hidden command that can verify both cluster synchronize the...

You verify the config sync using below command.Run “show chassis cluster status”, if there is a config sync issue you will see “CF” failure under ‘’Monitor-failures”

View Article


Re: Does entire session will re-establish back if we change MTU on physical...

So it would appear that changing the MTU essentially deleted and added the interface based on this type of logging you got. Dec 6 20:00:30.000 2017  srx2 : %USER-4: (FPC Slot 0, PIC Slot 3) SPC0_PIC3...

View Article


Re: Does entire session will re-establish back if we change MTU on physical...

This depeneds on where you change MTU, for example if you chnage it on physical interface level (set interfaces ge-0/0/4 mtu 1500 ), all sessions will be cleared but if its on logical interface level...

View Article

Re: Is there any hidden command that can verify both cluster synchronize the...

Hi rsuraj, May i know whether have some url as reference as evidence? Because one of my customer always want evidence / doc. Thanks and appreciate your help.

View Article

Re: Is there any hidden command that can verify both cluster synchronize the...

https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-chassis-cluster-status.html

View Article


Re: Does entire session will re-establish back if we change MTU on physical...

Hi rsuraj,  If i have multiple logical interface then i'm need to change on physical MTU right instead on logical.  Because if i'm not change on physical then whether i'm change on logical it not have...

View Article

Image may be NSFW.
Clik here to view.

Trouble with double NAT

Hi folks, I have a topology with 2 devices running NAT shown belowthe PC is double NAT before outgoing to the INTERNET. After that, the PC can not access a Web server on the Internet. I have ping test...

View Article

ISIS And new VR Routing Instance

Hi, I am trring to test some new security policies and have configured new zones and VRs.... but the Junos SRX seems to handle it different to the old ScreenOS.... So I cretaed 2 x new VR labelled as...

View Article


Re: ISIS And new VR Routing Instance

Hello,Please try set routing-instances  Green-VR protocols isis interface  ge-0/0/2.0HTHThxAlex

View Article


Re: ISIS And new VR Routing Instance

Hi, Yes, I kind of thought that. I managed to find that command after hunting and also thank you for posting here.I have entered the command into the VRs (both as you have suggested). I committed and...

View Article

Re: ISIS And new VR Routing Instance

Hello,It looks You don't have NET in this VR and hence no ISIS adjacency.Please add these lines:set interfaces lo0.100 family iso address <NET>set interfaces lo0.100 family inet set...

View Article

Manual failovers too LONG on SRX550 with bdf or lacp

Hi,has anybody some experience on failover duration ? I have a SRX-550M cluster, connected on donwlink side to a (HPE) L3 Switch cluster, in a 'square' architecture :  |           |SRX1--SRX2 |...

View Article

Issue with hub and spoke VPN with internet breakout

Hi all,Have got a setup whereby a sattelite site is connected via an IPSEC VPN, routes are exchanged via BGP, the sattelite site has a local internet breakout (Web/Email/DNS traffic picked up by a...

View Article


Re: Issue with hub and spoke VPN with internet breakout

Config at the sattelite is as follows (all sensitive info replaced with letters) system {<hidden> } syslog {<hidden> } max-configurations-on-flash 5; max-configuration-rollbacks 5; archival...

View Article

Re: Issue with hub and spoke VPN with internet breakout

Route table/routing instances are as followsinet.0: 22 destinations, 23 routes (22 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 0.0.0.0/0 *[Static/5] 3w6d 10:53:08 > to...

View Article


Re: Issue with hub and spoke VPN with internet breakout

And the appropriate flow trace is here (the IP doing the WAN side testing has been replaced with N.N.N.N) Dec 1 14:21:58 14:21:57.613943:CID-0:RT:flow_ipv4_rt_lkup_reroute: Route Lookup for dest route....

View Article

Re: ISIS And new VR Routing Instance

Hi, Thanks for the response. Yes, I enterred all of that configuration.... I did not ping from the routing-instance.... that is probably the issue then.... I will do that.... thank you. Why would I use...

View Article


Re: ISIS And new VR Routing Instance

Hello,adgwytc wrote: Why would I use lo0.100 ? Is this so I can seperate the same physical interface across multiple VRs... i.e lo0.100 to Custom-vr1 ,  lo0.200 Custom-vr2 , lo0.300 trust-vr and so...

View Article

Re: Does entire session will re-establish back if we change MTU on physical...

You either can change individually on logical interfaces (to get different MTU values) , or on physical interface so that all logical interfaces get same MTU.

View Article

Link failure detection

Is there a way to improve the detection of a link failure? If I manually disconnect a fiber, I see the link led up for a second (after the disconnection) and then goes down.Thanks

View Article
Browsing all 17645 articles
Browse latest View live