Re: SRX PROXY-ARP
This is not correct:route xx.xxx.xx.128/25 next-hop xx.xx.xxx.30; ------> /25 Network (Additional public IP) Your ISP will route xx.xx.xx.128/25 to YOUR side of the /30 network. You will use them...
View ArticleRe: Srx240 boot loop after uboot
so when i turn it on it gets to U-Boot 1.1.6-JNPR-2.4 (Build time: Aug 31 2012 - 12:15:03)SRX_240H2 board revision major:2, minor:9, serial #: ACKV4878OCTEON CN5230R-SCP pass 2.0, Core clock: 600 MHz,...
View ArticleRe: Srx240 boot loop after uboot
HI Joseph, You coudl use the command below to create a snapshot and then boot the SRX from that USB. request system snapshot partition media usb regards,Guru Prasad
View ArticleRe: office365
This type of problem is why application based firewalls were invented. You can do this if you get a license for the Application firewall and create application based rules. There is a signature for...
View ArticleRe: Use same IP address for IKE and IPSec
No, it is not supported to have both the same address for the vpn gateway and the traffic that transits the tunnel itself.
View ArticleRe: SRX220H2 - Cluster Issues (secondary node flapping): High CPU JSRPD
The control-plan cpu for node0 did not return to normal, so I ended up turning the switchports back on and permitting connectivity between the two nodes. The cluster reformed and has actually been...
View ArticleRe: Srx240 boot loop after uboot
done that now how do i make the broken one read the usb
View ArticleRe: Srx240 boot loop after uboot
created a image with the good srx but how do i boot usb as no prompt before it loops
View ArticleRe: Srx240 boot loop after uboot
Is there a removable cf card inside which I can remove which will force the corrupted and boot the usb
View ArticleRe: Srx240 boot loop after uboot
took it apart took internal battery out which cleared dram now in db mode?
View ArticleRe: Srx240 boot loop after uboot
solved the problem had to take the cover off seemed to fix crc which i had a funny idea it was that
View ArticleConfiguring SkyATP and Advanced Threat Prevention by Security Director
Hi,I've some problem, maybe some bug or think like that configuring SkyATP using Junos Security Director.I'd like to understand if someone of you has got the same issue. The problem is after I...
View ArticleJflow from a routing instance
A customer has an SRX with 2 virtual routers in packet mode. There are no interfaces in the default instance. I have been asked to confugre Jflow to monitor traffic of one of the interfaces within one...
View ArticleClik here to view.
Re: ISP link failover from SRX firewall to SRX router
Hi Steve,Sorry for incomplete info provided from my side. Please find below network topology and configuration details.1) BGP is configured for SRX340 ISP2) On SRX240 for ISP1 and ISP2 BGP is...
View ArticleTunnel from SRX to ISG
I'm having trouble establishing a route-based multipoint tunnel from an SRX5400 running 12.3x48 code to an ISG1000, pretty sure the issue is on the SRX side. The security association appears to be up...
View ArticleRe: SRX220H2 - Cluster Issues (secondary node flapping): High CPU JSRPD
Hi,As per the given output, I do see lot of jsrpd scheduler slip on node0. This may be because of high RE cpu on node0. You may try to failover all RGs to node1 and observe the RE CPU on node0....
View ArticleRe: Tunnel from SRX to ISG
Hi,When you use st0.0 as a multipoint interface, tunnel ip (st0 interface ip) of all peers should be in same subnet. Otherwise, ipsec sa will not be installed for that peer even though ike sa is up.If...
View ArticleRe: ISP link failover from SRX firewall to SRX router
Thanks for the detailed information. Make sure the ip address used for the routed link is part of what is advertised to the remote mpls sites. Then configuring the ip address on the routed link from...
View ArticleRe: Use same IP address for IKE and IPSec
I use as workaround now ipv6 for ike und ipv4 for ipsec. I think it's stupid anyway... greets
View Article