Quantcast
Channel: All SRX Services Gateway posts
Browsing all 17645 articles
Browse latest View live

Re: How to find newly created session from logs?

Thank you I have attached a log.One is "show security flow session summary"result and the other is "show security monitoring fpc 0" result.The results were like that. user> show security flow...

View Article


Re: log traffic for the default deny policy not working

Add session-close to the global policy. As best practice, always try to add session-close option at the end of a deny policy. Session-init would only show traffic for session initiated but won't show a...

View Article


Re: How to find newly created session from logs?

The session creation per second is usually taken every 96 seconds and it may be possible that no new session was created in the space of 96 secs. I checked on my home SRX and saw very similar...

View Article

Re: log traffic for the default deny policy not working

egawd, Can you add a deny policy with logging for the following context? From-Zone Internet to-zone junos-host Regards,AnandPlease Mark My Solution Accepted if it Helped, Kudos are Appreciated too

View Article

Failover and PBR / FBF on SRX

Hi Folks, Currently we are using 2 SSG5-SH to do link failover between 2 Office using 2 MPLS Provider.I've configured IP Tracking and PBR for specific LAN Segment also.We have plan to replaced those...

View Article


Re: log traffic for the default deny policy not working

I don't see anything wrong in your configuration. This is similar to what I have. I will lab your configuration and get back to you.

View Article

Image may be NSFW.
Clik here to view.

SRX and failover behavior

Hi, If I have a pair of SRX3400 (running active/standby) with physical connectivity similar to the diagram below. If I have configured all data interface to redundancy group 1, and also configured...

View Article

Re: SRX and failover behavior

I think this is a not supported scenario. You have 4 AE interfaces configured for 1 reth (reth1),we need only 2 ae . Please refer to KB22474 to understand the supported...

View Article


SRX100 boot problem

hello, SRX100 isnt booting up (status LED is orange), it sends me to u-boot automatically and i cant do anything from there. here is the output may need to detect problem or advice me what can i check...

View Article


Re: Failover and PBR / FBF on SRX

Hello, Are you using 2 Forwarding instance but keeping the two ISP facing interfaces on inet.0 (default router)?And are you using 'rib-groups' to populate interface routes between two forwarding...

View Article

Re: SRX100 boot problem

You may contact JTAC and request for an RMA/Replacement.

View Article

Re: SRX and failover behavior

Hi, ______________________________________________________________________________________________also configured interface monitoring for all the data interface which will trigger a failover if any...

View Article

Re: SRX and failover behavior

Hi Suraj, Both switches are actually running as single virtual chassis, hence the VC will only configure one AE to each unit of Firewall. The diagram is actually borrowed from this link....

View Article


Re: SRX and failover behavior

Hi Ashvin, I have responded to Suraj to clarified on the scenario, and also to address on your query.  Regards

View Article

Re: SRX and failover behavior

Hi,  IMO, with EX in VC and MC-LAG configuration this would be supported as well since the priniciple mentioned before is being obeyed.With weight of 255 for each individual interface and losing one of...

View Article


Command to verify licensed install on Cluster?

Hi all, is there any one know what command need to execute to see licensed install on both cluster without enetering the node 1?  Thanks and appreciate some one feedback

View Article

Re: Command to verify licensed install on Cluster?

Hello, I do not recollect if there is any command to get node 1 license information from node 0.However you can use below commands to enter to node 1 from node 0 to get necessary output. ** operational...

View Article


Just for my understanding -> chassis cluster Active/Active

Hi guys, just a question for my understanding.When using an SRX in chassis-cluster mode and want an active/active-usage then I will need to put reth1 in RG1 and reth2 in RG2. Lets say reth1 is...

View Article

Re: Just for my understanding -> chassis cluster Active/Active

Hello, If you have one local LAN & one ISP, then active/active is not possible.Production traffic travelling over Fabric link should be avoided as much as possible. Regards, Rushi

View Article

Re: Just for my understanding -> chassis cluster Active/Active

Hello, thanks for your fast reply.and if I have one local subnet and two ISPs ... can I use in this scenario active/active-cluster for load-balanncing-purposes ? Christoph. 

View Article
Browsing all 17645 articles
Browse latest View live