Clik here to view.
Re: Srx550 powering off sequence
Hello eugene1973, Greetings! To power off the services gateway, press the Power button on the front of the services gateway and hold it for 10 seconds. The services gateway immediately shuts down....
View ArticleRe: Srx550 powering off sequence
Hello , Forced shutdown—Press the Power button and hold it for 10 seconds. The device immediately powers itself off without shutting down the operating system. So ideally the FAN also goes off if the...
View ArticleHow to show cli command history for 3 dyas ago in SRX650
Hello, Please need to know how to show all commands that run in SRX650 from all users for 3 days ago. Appreciate your help Thanks
View ArticleClik here to view.
Re: How to show cli command history for 3 dyas ago in SRX650
Hi mahmoud.marie@dpworld.com,You can view the commands run from the interactive-commands/cli-commands file from the /var/log directory.To check which of the above file exists on your device, please...
View ArticleClik here to view.
Re: How to show cli command history for 3 dyas ago in SRX650
Hello Mahmoud, There is NO CLI command to see the history of show commands ran on the device. You can use the interactive-commands to see which user has typed what command: A common set of operations...
View ArticleVPN IPSEC - ECP or MODP encryption?
Someone, tell me - what encryption algo is better - ECP or MODP?An all my SRX at now i used group20. group24 will be better encryption or not? thxI want use group21, but his group as i understant only...
View ArticleClik here to view.
Re: VPN IPSEC - ECP or MODP encryption?
Hi dmisan, Greetings, As per my understanding we can decide on the better algorithm depending on the key size. I believe ECP outperforms the MODP algorithm. dh-group - group21 options introduced in...
View ArticleRe: Dynamic VPN reconnect issue
Post script: General information about these tracelines:I still see in Juniper kmd logs these IPSec timeout lines. E.g. in yesterday's log 46 times (roughly per 20 users): IPSec negotiation failed...
View ArticleRedunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs and...
I am trying to set up a redundant GRE interface to a remote site between 2 SRX devices. Both sites have redundant ISPs and i have them configured into routing instances r1 and r2. Each routing...
View ArticleRe: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
Are you required to use GRE tunnels and routing-instance? The st0 interfaces on the SRXs are more than enough for your traffic needs. You can even run multicast through them.
View ArticleRe: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
i am running OSPF inside and the GRE tunnel is my OSPF interface for internal routing. I have dozens of networks throughout my OSPF interface and i don't want have static routes
View ArticleRe: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
Hello, wrote: my next through was 2 seperate GRE Tunnels GR-0/0/0.0 >>source lo0.0 >> destination lo0.0 on remote srx >> route to s0.0 through r1GR-0/0/0.1 >>source lo0.1...
View ArticleRe: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
i realize that i can't run multiple gre tunnels with the same source\destination IP. that is why i have lo0.0 for gr-0/0/0.0 and lo0.1 for gr-0/0/0.1 on both SRX devices and had to configure the lo...
View ArticleClik here to view.
Re: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
The st0 can be configured like a regular inet interface Because of this, you really don't need to have multiple routing-instances. You would just treat each st0.x as two separate connections (on...
View ArticleRe: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
I have the s0 interfaces in seperate routing-interfaces because i have 2 ISPs and each ISP has a seperate routing interface. I think it is this way because i have seperate NATs on each ISP. do i need...
View ArticleRe: Redunant GRE through Redundant Site-to-Site Tunnels using multiple ISPs...
Hi Filaadmin, Yes, I think you could just configure RIB groups and share interface-routes between the routing-instance using policy-options, then you won't need to add the physical interfaces under the...
View ArticleRe: srx210 gr VPN tunnel frequently flap
Hi SamDid you disable the flow control also ? Still seeing the same issue . --> I tried suggested command to disable flow control. Command accepted and commit completed but flow control not...
View ArticleSRX320 ugrade error message
I am trying do do an upgrade on my SRX320 and i get the following messageNetwork security daemon: </xnm:warning>mgd: error: configuration check-out failedValidation failedERROR: Current...
View ArticleRe: SRX320 ugrade error message
Hi Shaks, Jtac has tracked down this issue under the PR mentioned below: https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1384319 If you think this resolve your concern please...
View ArticleRe: SRX320 ugrade error message
Hello shaks, Greetings !! I have few queries just want to know what is the current version you are using and which commands are using to upgradeMorever have a look on below Forum conversation where...
View Article