SRX320 LTE Configuration
Dear Team ;I have SRX320 with LTE Card .i have inserted two sim cards from two different ISP .Two Sim cards are for Private VPN (to reach HQ). Is it possible to establish one gre tunnel on each SIM...
View ArticleRe: One device, two organizations with one Internet connection
What is the right approach to configuring this when Source NAT is desired (assuming bandwidth available is sufficient) ? For example, consider an SRX-300 where Organization A is on ge-0/0/0.0 with...
View ArticleRe: One device, two organizations with one Internet connection
You should be able to configure dhcp server for both segments. Are you using the new version configuration under system services dhcp-local-server?...
View ArticleRe: SRX inter-zone vs. intra-zone
An important thing to remember about intrazone traffic is for devices in the same subnet. Typically the SRX has the gateway address so it is always in the path of traffic when you leave the zone. But...
View ArticleRe: SRX320 LTE Configuration
Hello, Since at point of time only single profile can be active, I doubt if you can have both GRE up at the same time ever if you are able to configure it....
View ArticleRe: source nat pool and proxy-arp not working
wrote:Hi,SRX will not reply to the arp requests if the request is not in the same subnet range. In this case, srx subnet is 172.20.15.0/24 and the arp request is coming from different subnet 73.x.x.x....
View ArticleRe: source nat pool and proxy-arp not working
wrote:can you configure ip 172.20.15.172 on lo0.0 interface and check if you can ping any address on the wan with src 172.20.15.172 ? I tried to configure a loopback interface as suggested:set...
View ArticleChassis Cluster 4100 4200
Dear JuniperCan i use DAC cable 10GB for Chassis cluster (Control and fabric)?
View ArticleRe: source nat pool and proxy-arp not working
Hi,Your configuration is correct. But you are getting the arp request from the modem's WAN ip address. It should be from the LAN address of the modem, like below:18:08:59.573682 In arp who-has...
View ArticleRe: Chassis Cluster 4100 4200
Hi Priyavit, As per the Juniper documentation you can use the following DAC SFPs in SRX4100 and SRX4200: SRX-SFP-10GE-DAC-1MSRX-SFP-10GE-DAC-3MSRX4100:...
View ArticleRe: source nat pool and proxy-arp not working
Hi Alfonso, ARP is intended for resolving the MAC addresses of devices within the same L2 domain (same subnet). In this case the modem should only send an ARP request towards the SRX if the destination...
View ArticleRe: (No) traffic through Dynamic VPN. Sometimes
I am sure Juniper and Pulse are doing everything possible to fix this situation because as you said, you are not the only one with this problem. Check, from time to time, the TSB document that I...
View ArticleClik here to view.
Issue trying to make some zones communicate with Internet
Hello all, I am currently trying to have two of my zones communicate with the Internet (untrust zone) without success. I have other zones that work fine. Machines can also communicate from one zone to...
View ArticleClik here to view.
Re: Issue trying to make some zones communicate with Internet
HI !there is a default route missing pointing to the internet see: Oct 16 10:33:25 10:33:25.555405:CID-1:RToing DESTINATION addr route-lookupOct 16 10:33:25 10:33:25.555422:CID-1:RT:Route-lookup for...
View ArticleRe: Issue trying to make some zones communicate with Internet
Hello Alexander, Thank you for your answer. As shown in my mail the routing configuration is as follow: #show routing-optionsstatic { route 192.168.6.50/32 next-table PRA-MF.inet.0; route...
View ArticleRe: Issue trying to make some zones communicate with Internet
do a show route table <instance-name>.inet0 0.0.0.0/0 extensive for the default route, to see if it is active and working, and if not what is the reason for it.also look for the next-hop in the...
View ArticleRe: Issue trying to make some zones communicate with Internet
Hello Alexander, Thank you once again for your reply. Here are the results of the command : 192.168.5.0/24 (1 entry, 0 announced) *Direct Preference: 0 Next hop type: Interface...
View ArticleDynamic VPN secondary DNS issue
Hi all, We're having an issue with our dynamic VPN secondary DNS allocation to clients. The configuration is as follows : family inet { network 192.168.10.0/24; range range-XXX{ low...
View ArticleSRX345 VPN issues with Cisco SA520W
Good day, We have recently replaced a FortiGate firewall with a new Juniper SRX345. Networking-wise everything is working fine, however we are getting issues with e VPN connection to a Cisco SA520W....
View ArticleRe: SRX345 VPN issues with Cisco SA520W
Hi ea-aua, Can you hardcode the source and destination IP addresses that will be used by VPN monitoring: https://kb.juniper.net/InfoCenter/index?page=content&id=KB10119 Make sure they are within...
View Article