Adding SPC cards to an SRX5800
So we have an SRX5800 cluster, with both devices having two SRX5K-SPC-2-10-40 SPC cards installed in FPC slots 10 & 11 (the highest slots). If we want to add a new SRX5K-SPC-2-10-40, what is the...
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
Hi Wojtek, You can refer to the attachment. Thanks,Kay
View ArticleRe: Adding SPC cards to an SRX5800
Hi ,The procedure you are mentioned is applicable when you are doing ISHU (In-service Hardware Upgrade - No impact). If service impact is acceptable, you can install the new SPC by shutting down both...
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
Looks like there is a problem with 124.65.160.169 gateway reachibility.Can you please try:ping 124.65.160.169 source 124.65.160.172 show arp interface reth3.0Regards, Wojtek
View ArticleRe: Security Director don't delivery correct schema configuration for SDSN
Hi Alfaromeo and thank you for your feedback.I can confirm thtat we're running the same vSRX's 17.3R1.10 version. We'll upgrade at the 17.4 as soon as possible (to see if this effectively will resolve...
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
Hi Wojtek, You can refer to the attachment. Thanks,Kay
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
Is it because this reth3.0 in down status?
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
Yes. How is the ISPs modem connected to the SRX? Is there a switch in between or is is directly connected to node 0?Regards, Wojtek
View ArticleRe: Security Director don't delivery correct schema configuration for SDSN
Tried to upgrade too...Right now my junos space from yesterday night is trying to upgrade the DMI schema!!!! :-|Then I can't provide you the feedback...Waiting for it :-)
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
Here is the connection table FW1 ge-0/0/6 > port 10 (vlan12) SW1 port 13 (vlan12) > ISP modemFW2 ge-5/0/6 > port 11 (vlan12) SW1 ge-0/0/6 { gigether-options {...
View ArticleRe: SRX340 with Filter-Based Forwarding Issue
I've just noticed that reth count is configured to 3. It has to be increased to 4set chassis cluster reth-count 4;Regards, Wojtek
View ArticleRe: SRX650 - software installation problem
Dear Spuluka, i tried all of this but result is same.this is my srx log-------------------------loader> U-Boot 1.1.6-JNPR-1.9 (Build time: May 17 2010 - 06:30:31) SRX_650 board revision major:0,...
View ArticleREST API Networks
Hi,From what I can see and what I have read, it looks like the "allowed-sources" in the REST API has to be inserted with a host address only. Maybe I have missed something somewhere: We have developers...
View ArticleGlobal Policy and need for Zones
Hi everyone.Let say we have SRX and only Global Security Policy that allows all Traffic. In Global Policy, no zone pair is checked, traffic is evaulated against the Global policy alone.This is what I...
View ArticleRe: Global Policy and need for Zones
Interfaces that are not explicitly assigned to any zone are assigned to special Null zone. By design traffic hitting null zone is dropped.Even though you do not have to specify zones in global...
View ArticleRe: SRX650 - software installation problem
It looks like you internal flash drive on the SRX650 has failed. ERROR: Execution failed for command fdisk If you have hardware support, open a ticket and get an RMA started on the device. If you don't...
View ArticleRe: REST API Networks
Unfortunately, subnets are not allowed only ip addresses. This is based on the assumption (not correct here) that the calls will be made from some sort of permanent server platform. So that is one...
View ArticleRe: Route based VPNs have disappearing static routes when IKE/VPN activate
I opened ticket with JTAC and they got me going. We removed vpn-monitor then added proxy-id for one VPN and traffic selector for second VPN. My static routes now appear correctly and VPNs are working....
View ArticleClik here to view.
SRX1400 Trunk Issue
I have the follwing design: every thing in design working fine except pingable from L3 Core (Vlan1) to irb.1 and from irb.1 to L2 Switch (Vlan1) not pinging, while i tested directly between L3 Core...
View ArticleRe: SRX1400 Trunk Issue
You have to assign irb.1 to security or functional zone and specify ping under host-inbound-traffic. Regards, Wojtek
View Article