Re: Selecting the right SRX
Hi Steve Yes I understand, but the issue is that I don't have any other info besides the one provided, how should I proceed to find bandwidth requirments and other info like concurrent session just...
View ArticleRe: Selecting the right SRX
Hi Mannan, "A small datacenter having 500 users" is not enough to choose any SRX at all.You need to get more Infos because with this requirement it is nearly impossible to impossible finding the...
View ArticleRe: SRX and failover behavior
Hi Ashvin, Thanks for your explanation, it greatly helps to clear my doubt. Do you think it is possible to have interface monitoring configured on active SRX unit only in order to prevent both SRX unit...
View ArticleRe: SRX 210 giving slow download speed but max upload speed
We are using the basic speed test and iperf results yes there is a policy that allows outbound traffic but whats bothering us is if it is the VR/routing instance or the SRX 210 is the issue how does...
View ArticleBGP sessions on clustered SRX
Hi, is it normal behaviour for when you reboot or failover reduncy group 0 to the passive firewall, that existing BGP sessions gets re-established. Thanks,
View ArticleRe: BGP sessions on clustered SRX
Hi, AFAIK, I think this is normal as SRX HA does not have capabilities such as GRES & NSR.Cheers,Ashvin
View ArticleRe: How to find newly created session from logs?
Thank you for your message. It made me relief. Back to my original question, how can I check new creation session flow except for traffic logs?
View ArticleSRX 240 CoS what if I need more than 8 forwarding classes
Hi all,hope someone can helpOn existing SRX 240 I need to provide CoS solution for an office that needs to segregate 25 VLAN-s.Need to provide equal treatment to all VLAN-s, meaning every VLAN gets...
View ArticleRe: SRX 240 CoS what if I need more than 8 forwarding classes
Hi, AFAIK, only 8 queues are possible, however you can have more than 8 forwarding classes [FC] but 1:1 mapping of FC to queue would not be possible. I believe the requirement can be met using a...
View ArticleRe: BGP sessions on clustered SRX
Yes, it's completely normal - actually all protocols and management stuff are handled by the master node in RG0. So switching mastership in RG0 will cause most of the protocols and management session...
View ArticleRe: Selecting the right SRX
Sorry, but number of users is simply not helpful. The fact that it is a data center location is some help to guessing the probable sizing. But it will still be a guess. If this is an upgrade or move...
View ArticleRe: Use 12V adapter on SRX210HE2-POE if I'm not using POE?
I ended up purchasing the correct power supply.
View ArticleRe: BGP sessions on clustered SRX
This is expected behavior. You may use graceful-restart to minimize the traffic disruption...
View ArticleRe: log traffic for the default deny policy not working
Hiegawd, I was doing some testing on this and below are my findings. 1. RT_FLOW_SESSION_DENY is generated with "session-init" and not with "session-close". This makes sense the traffic was dropped...
View ArticleRe: SRX and failover behavior
I may be missing some points here, but what if we make the interface weight 100.In this case if switch 1 goes down there will not be a failover as the threshold wont reach 255 ( it will be 100+100) and...
View ArticleRe: SRX 210 giving slow download speed but max upload speed
Can you share the SRX configuration ?
View ArticleSRX 240 hairpin nat not working
Hello, i have problem with hairpin nat on srx 240. I have one hairpin nat from same zones and one from different zones. From same zones nat is working, but from different zones nat doesnt work....
View ArticleRe: SRX 240 hairpin nat not working
Please share your configuration to understnad the issue in a better way along with "show route" output
View ArticleRe: SRX 240 hairpin nat not working
Here is my show route output. inet.0: 57 destinations, 57 routes (57 active, 0 holddown, 0 hidden)+ = Active Route, - = Last Active, * = Both0.0.0.0/0 *[Static/5] 9w5d 00:51:25> to 195.182.79.129...
View Article