in-service upgrade Cannot execute command /sbin/sysctl hw.re.dualroot.enabled...
I am trying to downgrade my system, but I am getting the following error. I know I can fix it by rebooting the system - but is there a way to fix this without rebooting? root@brick-01> request...
View Articlehow to igmp querier on srx5800?
Hello guys,a customer of mine is migrating cisco catalyst to nexus who doesn't support igmp querier feature, so we decided to use the srx instead.Can i make srx interfaces IGMP querier? how to? and......
View ArticleRe: how to igmp querier on srx5800?
the best information aou can find on https://pve.proxmox.com/wiki/Multicast_notes#Juniper_-_JunOShttps://pve.proxmox.com/wiki/Multicast_notes#Juniper_-_JunOS regards alexander
View ArticleRe: how to igmp querier on srx5800?
thanks for your reply, but i don't understand what are you tring to tell me... 2 links brings me to the same page who talk about EX series...i'm missing something?
View ArticleRe: Why is the SRX using NAT-T for the IPSEC?
Hi The NAT rule that you created, set security nat source rule-set SNAT_use_interface from routing-instance defaultset security nat source rule-set SNAT_use_interface to zone Untrust is very general, I...
View ArticleSRX USB auto install
Hello everyone, I have about 120 SRX devices to deploy across the country, and I'm trying to figure out a way to configure these things without shipping them all directly to me, and then back to their...
View Articlejflow not working on reth interface
Any idea on this? I cannot get this darn thing to work on reth interface - works fine on our non HA srx's JUNOS 12.1X46-D35 /* Lan LB */ reth2 { redundant-ether-options { redundancy-group 1; } unit 0...
View ArticleRe: in-service upgrade Cannot execute command /sbin/sysctl...
Would you be able to failover the RE and the reboot while it is the slave?
View ArticleRe: jflow not working on reth interface
Hello , Can you confirm the device model ( Branch or Datacenter ) . In Branch serial , I am afraid that version 9 is supported in Cluster . In data center devices it does ....
View ArticleRe: [request feature] dual control / fab on branch srx
Hello , There is no Duel Control Link concept on Branch SRX devices and there is no enhancement for the same .
View ArticleRe: Strange IPsec behaviour between SRXs
Gentlemen. I've reconfigured the port on the SRX-01 from "vlan-tagging" to "port mode trunk" and reconfigured the vlans also. Here is Interface config:Den@SRX-01# show interfaces fe-0/0/7unit 0 {...
View ArticleRe: ike SA unusable and ike No proposal chosen
Hello,Looks like 217.12.253.226 does not reply: ike_send_packet: Start, retransmit previous packet SA Is 217.12.253.226 behind a firewall or stateful NAT, or is the an ACL preventing pkts sourced from...
View ArticleRe: ike SA unusable and ike No proposal chosen
Thnak you for your replys.No firewalls / filters / polices are blocking traffic, at least i am not aware about them. On 217.12.253.226 i noticed that it has several security-associations:show security...
View ArticleRe: ike SA unusable and ike No proposal chosen
Hello, 217.12.253.226 <-> 83.234.107.110] iked_pm_phase1_sa_cfg_lookup_by_addr: Address based phase 1 SA-CFG lookup failed for local:217.12.253.226, remote:83.234.107.110 IKEv1 [Jan 30...
View ArticleRe: ike SA unusable and ike No proposal chosen
Thank you!There was 83.243.107.110instead of83.234.107.110
View ArticleClik here to view.
Problem with CoS behavior on SRX210HE
All, I'm using an SRX210HE running Junos 12.1X46-D35.1 I'm stumped....I've got a very simple setup:There is ftp and http traffic going from "Remote Host" to "Local Host". I'm trying to rate-limit the...
View ArticleMoving SRX firewall filter rules
Hello, I would like to know the command for moving the firewall filter rules in SRX , I have done it via GUI , but Gui is not permitted . What I am looking is moving the Banned-ip list top of Term T1...
View ArticleRe: Moving SRX firewall filter rules
Hi binoybaby,You just need to go under the edit mode and under firewall filter configuration;edit firewall family inet filter outbound-natand run;[edit firewall family inet filter outbound-nat]root#...
View ArticleRe: Fail over with RPM between 3 ISP's
Hi, was there a solution to the above problem please? Thanks.
View ArticleClik here to view.
Re: Strange IPsec behaviour between SRXs
Dear Den, Sorry for not getting back to you earlier I was travelling . I want to check the connectivity between the two SRXs over the VPN tunnels first .Can you issue the following commands on the...
View Article