Re: SRX Chassis-Cluster with dns-proxy
Hello , Kindly let me know if all those interface has IP configured . When I checked in the devices , the interface without any IP is not showing Up in the DNS proxy list .Can you verify that
View ArticleRe: SRX Chassis-Cluster with dns-proxy
Hello , For testing , I removed an IP from an existing interface which was showing in DNS proxy list and after removing the IP , the interface is no longer in the proxy list . Interfaces :...
View ArticleClik here to view.
Re: Routing Instance VPN Solution
Hi all,I have an srx located in the data center. The plan is to use the IPSec dial tunnel between the SRX and multiple clients. The plan is to share the IP address of the SRX endpoint to all clients,...
View Articlesrx210 gr VPN tunnel frequently flap
Hi, We have internet link in between site and head office with BGP configuration. VPN tunnel is configured with gr interface.There is no issue observed for BGP tunnel. Based on below logs and config,...
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hello The BFD timmer you configued in 1 Sec ( 1000 millisec). So your detection timer is 4 sec seconds . So kinldy increase the intervel to 2000 ms and multiplier to 5 and see if you see the same...
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hi Joses, Thank you for quick response. do i need to change interval for minimum-interval as well holddown interval? what is command to disable the flow control(i tried but couldn't get the command)
View ArticleRe: SRX Chassis-Cluster with dns-proxy
Hi, Joses!All interfaces has ip-address configured and all interfaces are in default routing instance. The problem is that SRX working at chassis cluster mode. Same problem was in...
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hello Holddown timer also can be changed to 5Sec . Flow control in by default disabled in Ethernet interface . We have to do the follwoing configuration to ebale it on SRX :...
View ArticleRe: SRX Chassis-Cluster with dns-proxy
Hello , Ideally this should have fixed with a simultaneous reboot . Since as per the link the issue was reth interface was not getting registered in the dnp-proxy settings . Can you try "restart...
View ArticleRe: SRX Chassis-Cluster with dns-proxy
Both cluster nodes rebooted simultaneusly by "reques system reboot node all".Restarting named service did`t fixes issue. ALSO:cat /etc/named.conf include "/etc/rndc.key";controls {inet 127.0.0.1 port...
View ArticleRe: SRX Chassis-Cluster with dns-proxy
Hello , "reques system reboot node all" may not always reboot both nodes in SRX . So Its adviced that we reboot both nodes from their individual consol/SSH ( give "request system reboot " on both...
View ArticleRe: Routing Instance VPN Solution
In Junos you will use routing-instance function with the virtual route type. You put interfaces into virtual routers and they will each maintain their own separate routing table. The private address...
View ArticleRe: SRX1500 will not boot junos - wind river linux
Hi both, Thanks for the reply, I have RMA'd the unit... This happened to me whilst upgrading a SRX 1500 HA pair in staging.. Is there any documentation from Juniper regarding HA upgrades and a standard...
View ArticleClik here to view.
Re: SRX1500 will not boot junos - wind river linux
Hey jjelliott1821 Greetings, good thing you were able to RMA the devices , regarding HA upgrades and stand lone here is the information you need: HA :...
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hi, we implemente the suggested changes but still BGP tunnel flap issue is there.Any suggestions or logs required? Thank you..
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hello Target, Good day!Can you please check the below and let us know the updates. 1. How frequently does the BGP tunnel flap. Is there a specific time inerval after which it goes down and comes back...
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hello , Did you disable the flow control also ? Still seeing the same issue . Do you have any screen options set on the SRX zone where the BFD is configured ? Do you see High RE CPU during the same ?
View ArticleRe: Classifying Skype traffic
wrote: Another feature that would affect any voice/video application is screening, do you have a screen configured on your SRX and applied to the untrust zone? One of the typical issues I come across...
View ArticleRe: SRX Chassis-Cluster with dns-proxy
We rebooted both nodes:node0:--------------------------------------------------------------------------...System booted: 2020-06-23 00:27:20 UTC (14:40:04 ago)...node1:...System booted: 2020-06-23...
View ArticleRe: Classifying Skype traffic
wrote:If you have the license enabled the SRX AppID can identify Skype traffic directly and engage AppCoS to apply policing and dscp values....
View Article
