Re: IPsec scheduling or on-demand
Hello, Firstly I would like to inform that i have never tried and tested the below solutions that I am going to propose so I am not sure of its success but still I wanted to share them with you to see...
View ArticleRe: Redundant Interface
Hello, Unfortunately there is no correspnding feature on SRX as compared to SSG's Red interface. On SRX load balancing is possible by bundling two interfaces using LAG, LACP but active/ passive...
View ArticleRe: Branch SRX capacity numbers
Hi, Please find the numbers from the SRXs :- SRX345root> show log nsd_chk_only | match "max " Max Policy = 4096 Max Policy Context = 256 Max Policy per Context = 4096 Max Statistics Counter = 256...
View ArticleRe: SRX 300 - How to disable transparent mode
Hello, This is an already reported issue under PR 1190969. Please refer the below link.https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1190969 It should be solved in the coming...
View ArticleRe: SRX 300 can not enable loopback on physical interface
We upgraded to 15.1X49-D50.3 We still have the same problem. Regards, Michel.
View ArticleSpecial SFP ... (40G->4x10G splitter cables)
Hi,I have a question on 'special' connectivity on SRX550 ! We will connect one pair of SRX550 to one pair of HP Switch, using 40G->4x10G splitter cables between both. (see drawing attached) FWx...
View ArticleRe: SRX 300 can not enable loopback on physical interface
Hi, I have checked for this internally and this issue has been identified as a bug. It would be fixed in the release 15.1X49-D60 for which the tentative relative date is 15/09/2016. Regards,Sahil...
View ArticleRe: SRX 1500 cannot use command "set network-management cluster-master"?
Hi, I know we can manage using MGT port. But i dont want to lay addtional cable on SRX and just using RETH interface. That previous command is very useful and why juniper throw out the useful command....
View ArticleRe: Special SFP ... (40G->4x10G splitter cables)
Hi, The SRX does not support non-juniper SFPs. That being said, the 3rd party SFPs might/might not work. I have personally seen issues with traffic or interfaces not coming up when using non-juniper...
View ArticleRe: SRX 1500 cannot use command "set network-management cluster-master"?
Hi, If you are using a reth interface to manage the SRX cluster, you would only be able to see the primary node as the reth IP would be active on the primary node only.ON the secondary node, the rpd...
View ArticleSelecting the right SRX
I will be really greatful if some one can suggest me a SRX model based on the following: SRX to be placed in core in a small datacenter Total number of user is 500 Providing:Bandwidth ManagementWeb...
View ArticleRe: How to find newly created session from logs?
Hi, The session creating information could be found in the traffic logs of the SRX with the keyword "RT_FLOW". These can/cannot be seen on the SRX depending on the type of logging you are using. The...
View ArticleRe: Site to site VPN routing problem
Hi, The problem description is not very clear.If you want to route all the traffic from the remote office to the Main Office, please change the following route on the Branch Side :- set...
View ArticleRe: How to find newly created session from logs?
Thank you, Sahil Sharma I have tested this command, but the result is always like below;Total Session Creation Per Second (for last 96 seconds on average): 0 But so many failed sessions are generated...
View ArticleRe: How to find newly created session from logs?
Hi, Failed sesisons would not be counted as created sessions hence they would not be seen in this counter.We would need to find out the reason for the failed sessions, they could be due to the max...
View ArticleRe: Cant browse internet
Are Subnets A and B part of the same zone? Please share the config. Regards,Anand
View ArticleRe: How to find newly created session from logs?
Thank you so much! I will check the show security flow session summary command. >Are the failed sessions continuosly increasing on the SRX ?Yes, they have been increasing since we started using it....
View ArticleRe: Cant browse internet
Could you please share the complete config. You are still missing routing config in the file. Anand
View ArticleRe: How to find newly created session from logs?
HI, Whether performance will be affected will purely depend on the amount of traffic through that policy. Regards,Anand
View Article