Re: No ping Proxy-ARP from LAN/DMZ
Hi, Thank you for your answer.So if we have untrust interface IP with same subnet of proxy-arp IPs, we can't ping these ?I use proxy-arp for use multiple public IP and for some reason we must access...
View ArticleRe: SRX240 dual ISP
Hi, You may need to add the tunnel interfaces under the RT-VPNTUNNELS instance and change the instance-type to virtual-router assuming the tunnel interfaces are up. Cheers,Ashvin
View ArticleRe: No ping Proxy-ARP from LAN/DMZ
Hi, Is the requirement to host DMZ Servers on these public IP addresses ? If yes, you can use destination NAT on the SRX to achieve...
View ArticleClik here to view.
vSRX Web Filtering not working???
Dear members; i have a very strange issue on vSRX 12.1X47-D20.7... i have configured web-filtering (local) on the vSRX as follows: custom-objects { url-pattern { whitelist { value [...
View ArticleRe: vpn connection behind a nat device
HI Steve, below is the output of "show security ipsec statistic", would it be good to say that srx is sending the traffic to the tunnel? is there any other show command to check if the vpn traffic or...
View ArticleRe: vpn connection behind a nat device
Hi Sharma, it is a policy based VPN. is the output of "show secutity flow session" alread can show if there is a problem on NAT?
View ArticleRe: vpn connection behind a nat device
Hi, The link which I provided had the NAT troubleshooting, however I wanted you to configure security flow traceoptions after referring that link and not troubleshoot nat. The security flow...
View ArticleRe: vSRX Web Filtering not working???
UTM policy has to be applied to a zone !?I am missing a statement in your output. regards alexander
View ArticleRe: No ping Proxy-ARP from LAN/DMZ
Hi sahilsha ! Thank you !! It is working :-) I added dst-NAT from LAN with Destination NAT if public IP match. Best regards.Charlie.
View ArticleRe: vSRX Web Filtering not working???
Hi, Please use the following command, commit the configuration and check again :- #set security utm feature-profile web-filtering type juniper-local#commit Regards,Sahil...
View ArticleRe: SRX USB auto install
you need to verify the name of the conf file. it must be "junos-config.conf" . If you created it in windows check his extention. If all is good and the file is not token, so you have an error in the...
View ArticleRe: SRX USB auto install
Hi,We need to have a USB drive with 3 files on the drive as follows :- Junos image file for upgrading the SRX.autoinstall.conf – This file should contain only <“ “> in its body (without the...
View ArticleRe: No ping Proxy-ARP from LAN/DMZ
Charlie, Thanks for the update. It is good to know that the issue has been resolved and I was of help to you. Regards,Sahil Sharma---------------------------------------------------Please mark my...
View ArticleRe: vSRX 15.1 D50 cannot add ge- interfaces
Dear Rushi ,I have the same issue and i followed your document but no interfaces appeared on "show interface terse" So, appreciate your valuable help. Regards.
View ArticleSRX345 management alarm
Hey guys, I'm not using the management interface on my SRX345 cluster. There is a major alarm because the management interface is down. Normally, I'd use the following config to ignore the management...
View ArticleRe: Configuring SRX for home use
Good stuff. I am new to Juniper and I am trying to setup my SRX210 to my cable modem.I have tried so many different things but I am trying to use your config as a learning example.Question, I see that...
View ArticleRe: SRX345 management alarm
Hi, Please try disabling the interface and see if it helps. set interfaces fxp0 disablecommitRegards, Sahil Sharma
View ArticleRe: SRX345 management alarm
Hi, Did you try disabling the fxp interface:https://kb.juniper.net/InfoCenter/index?page=content&id=KB19523&actp=search Cheers,Ashvin
View ArticleRe: How do I configure DHCP option 43 byte-stream with the new JDHCP service
FYI, I was able to find a solution to this issue. Instead of converting the ASCII string to a decimal byte-stream, you would instead convert it to a hex-string and use the following set command. # set...
View Article