Re: Dynamic Traffic Shaping
Hi Alex, So in this scenario if I put a 20Mbps output policer/shaper on ge-0/0/1 - would that mean that ge-0/0/2 would be able to saturate the 100Mbps? Chris
View ArticleRe: SRX 340 - How to manage out-of-band fxp0 in a route-based, active/passive...
Hi Muyo, I would say keep the management in the default inet.0 and create vr's for the trust/untrust vr's for Lan and VPN traffic. Regards, Rahul
View ArticleRe: After abrupt power loss SRX300 stack in Octeon srx_300_ram# prompt and...
It's been a while since last post - have you solved this problem? If yes, then can you share how?We're facing the same issue even with the latest software and new device. And it hapens also after a...
View ArticleRe: High CPU, not traceable
i restarted it: PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND 10 root 1 171 52 0K 12K RUN 1270.1 32.47% idle: cpu0 84871 root 1 -8 15 11648K 7028K RUN 0:23 8.98% sampled 86508 root 1 139...
View ArticleRe: High CPU, not traceable
you may disable sampling to confirm the cause and then think about adding/notadding finetuning the same.
View ArticleRe: Dynamic Traffic Shaping
Hello, wrote:Hi Alex, So in this scenario if I put a 20Mbps output policer/shaper on ge-0/0/1 - would that mean that ge-0/0/2 would be able to saturate the 100Mbps? Your ask was to limit the 100Mbps...
View ArticleRe: SRX 340 - How to manage out-of-band fxp0 in a route-based, active/passive...
Hello rahulverma, so i just create two other VRs (Trust and Untrust) and let the default be. But i must define the source address for every service to the fxp0, so it will be routed by default table?...
View ArticleRe: junos equivilant to screenos VIP port redirection
Hi Mate, With regards to your config for Dest nat, I would like to know if I must add a proxy-arp for the Interface SRDP (ge-0/0/4.0)?I've been adviced to add those two lines to the config. set...
View ArticleRe: SSL Forward Proxy Certificate
Hi I imported the CA cert list to SRX, but I got a bowser certificate error that "this certificate cant be used for this purpose", which means it cant be used as a trusted root certificate. So I used a...
View ArticleRe: SRX 340 - How to manage out-of-band fxp0 in a route-based, active/passive...
Hi Muyo, Please find your answer inline:- [Muyo]so i just create two other VRs (Trust and Untrust) and let the default be. But i must define the source address for every service to the fxp0, so it...
View ArticleRe: SRX100 and Unifi AP - 2 subnets on 1 interface required
Hi, After almost 12 months I finally had a chance to readdress this issue and decided to send an update for everyone else who might be experiencing teh same problem;Solution above preatty much worked...
View ArticleRe: junos equivilant to screenos VIP port redirection
Hello Ismail, You would only need to configure proxy-arp ONLY if the network of the ip address on ge-0/0/4.0 contains 172.21.24.30. eg. If ge-0/0/4 has 172.21.24.1/24 --- then Yes, proxy arp is...
View ArticleRe: SSL Forward Proxy Certificate
Hi, So, is the first reported issue no longer happening? Please note that my previous suggestions were to be applied on the SRX only. Assuming that the first issue was solved, my understanding is that...
View ArticleIntegrated User Firewall -srx 345
hello everyone,we have cluster mode srx 345 in production. for web filtering using TMG for that enabled filtering for port 80 and 443. as TMG is no more support by microsoft now planing to move on...
View ArticleRe: SSL Forward Proxy Certificate
Hi Yes I used the self-signed certificate, loaded it to clients, and loaded the list of CA certs, and then were able to browse the https traffic. Thanks for support
View ArticleRe: Integrated User Firewall -srx 345
Hi, WaseemR Can you share the following configuration command: show access When you authenticate the user, the SRX should contact your LDAP server for credentials validation. We could see this...
View ArticleRe: Integrated User Firewall -srx 345
Is this behavior specific to internet explorer?Can you share the security policy config for non domain users
View ArticleSTP protocol problem
Hello Everybody,I have following setup modem --> SRX100H2--> Netgear GS716Tv3 switch--> (rest of th network including Hyper-V infrustructure, DC/DHCP, and Unifi WAP) On SRX100H2 I have...
View ArticleRe: junos equivilant to screenos VIP port redirection
Morning Mate, Thank you so much for all your help and advice. Regards,Ismail
View Article