Questions tagged [juniper-srx]

The Juniper SRX is a series of security services devices running Junos. Security features include the full UTM functionality previously found on ScreenOS, including web filtering, IDP and anti-virus. Although high-end and low-end SRX platforms differ in the underlying hardware, common software base enables feature consistency and signature Juniper routing code.

Filter by
Sorted by
Tagged with
1
vote
1answer
25 views

Unstable network performance within the same facility

Asked this question previously, but it wasn't as detailed as this. I had my network speed improved by my ISP, I tested the network speed from the Fiber media converter, the speed was awesome, tested ...
0
votes
1answer
22 views

PEM Modules Redundancy in Juniper SRX3600 series Firewall

We have Juniper SRX3600 running in our network. At the moment only 2 x PEM Modules (AC Power Supply) are installed in the chassis while other 2 x PEM are not. This is shown below from the output of '...
0
votes
1answer
22 views

Juniper / SRX-100 / Repurpose old device / Disable DHCP?

I have an old Juniper SRX-100. I want to re-purpose it for my network. I need to extend the network in a new location, so I need more ports. I could use a simple switch, but I have this laying ...
2
votes
1answer
70 views

Juniper SRX Application Inactivity Timeout

Will the inactivity timeout set for the application "TCP-ALL" of 900 trump the default value of 1800 for junos-ssh if the application-set were matched in a security policy? Does it matter if the order ...
0
votes
2answers
56 views

network slowness troubleshoot

I want some suggestion regarding our network issue: From our office location to our DC ==> it's ~270msc(office and DC lies in different countries). As, you can already see here latency is the major ...
1
vote
2answers
59 views

Applying WAN Changes to Juniper Chassis Cluster

I have a Juniper SRX 340 in a chassis cluster state. I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
2
votes
2answers
67 views

SRX to ASA IPSec troubles

we built a VPN between partner's Cisco ASA (unknown version) and my Juniper SRX 340. The tunnel seems to go up properly: root@fw01> show security ike security-associations node0: ----------------...
0
votes
1answer
225 views

Juniper SRX 340 configuration import/export

Good morning, I have a Juniper SRX 340 Cluster (15.1X49-D70.3) in a professional environment, and a third firewall (same model) that I'd like to use as a test firewall. Is there any simple way to ...
1
vote
1answer
196 views

Juniper port forward range of ports with dynamic pppoe

I have Juniper SRX300. Due to some restrictions, i can't use static WAN IP address. I need to port forward a range of ports and it's working only using nat static section like this: username# show ...
4
votes
2answers
742 views

Juniper SRX answers all ping requests instead of forwarding

I have about 4 different subnetworks at my place, when i'm trying to ping to static device in subnetwork1 from subnetwork2 i always see that device pings, even if it's off. I assume my SRX300 answers ...
2
votes
1answer
111 views

Juniper SRX sniffing

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug. I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
4
votes
1answer
330 views

Dump traffic on routing-instance with a Juniper SRX firewall

A Juniper firewall can display data with the tcpdump command: % tcpdump -i ge-0/0/0 % tcpdump -i vlan10 However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
4
votes
1answer
809 views

Advertise all static route except the default gateway with Juniper SRX firewall

With the following policy, all static routes are advertised via BGP to my neighbor: root@Nitrogen# show policy-options policy-statement bgp-export-policy { term export-statics { from ...
4
votes
1answer
627 views

IPv6 default route not being installed from RA

Platform: Juniper SRX300 Version: JUNOS 15.1X49-D160.2 ISP: Midco I currently have an issue where the IPv6 default route is not being installed from the CMTS RA. Try as I might, I cannot get ...
3
votes
1answer
176 views

Site-2-Site Juniper SRX & Zywall

I've a Juniper SRX 340 on my datacenter and a Zywall USG 100 on my office. I'd like to build a site-to-site VPN between them, but after a lot of tries I can't still reach the result. This is the ...
3
votes
1answer
79 views

Juniper MX/SRX series interface monitoring command

Good morning all, I was curious due to an issue were currently troubleshooting in our environment if there is a command in Juniper that will allow us to determine the utilization percentage of an ...
1
vote
1answer
420 views

IPSec route-based vpn st0 interface

As i know, the st0 interface is used when the gateways are configured with route based VPN. But my question is, say below is the topology A<---->B<---->C<---->D A and D are hosts, B and C ...
3
votes
1answer
487 views

Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource

Multiple VPNs setup with a Juniper SRX320. The SRX320 has an irb interface as follows: irb { unit 0 { family inet { address 192.168.120.1/24; } } } I've setup ...
0
votes
1answer
44 views

faild hardware address for ifd ge-0/0/0 failed on junos-vsrx-12.1X47-D20.7-domestic vmware machine

I have been trying to configure dhcp client on ge-0/0/0, I have asked a question before about it in this link At first the solution provided worked, but when I started the virtual machine again it ...
4
votes
2answers
405 views

Juniper SR300 maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
3
votes
1answer
322 views

Configuring DHCP on Juniper junos-vsrx-12.1X47-D20.7-domestic on vmware

I'm preparing for JNCIS-SEC exam. I used junos-vsrx-12.1X47-D20.7-domestic image to create virtual machine in order to practice for the exam. I am following this to configure the vsrx. When I do the ...
4
votes
1answer
885 views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
3
votes
1answer
2k views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
1
vote
1answer
121 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
3
votes
1answer
670 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
2
votes
1answer
166 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
3
votes
1answer
472 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.
0
votes
1answer
252 views

Juniper SRX 240H latency going on with HA Cluster. Are there any steps to troubleshoot the issue?

Currently we are having a latency issue between a Juniper HA cluster and a Cisco switch c3750. We have LACP configured between them. reth3 { vlan-tagging; redundant-ether-options { redundancy-group 1;...
3
votes
1answer
1k views

Connecting an SRX chassis cluster to redundant upstream WAN links

I've been tasked with migrating some Juniper SSG 140's in an active/passive cluster to an SRX 340 cluster. I'm very familiar with ScreenOS, but am still learning JunOS. Currently, we're connected to ...
2
votes
1answer
101 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...
1
vote
0answers
664 views

2x Juniper SRX300 RETH interface on multiple interfaces [closed]

We have two SRX300 boxes in a chassis cluster. I have configured the RETH0 interface for WAN communication and assigned 1 port on the first unit and 1 port at the second unit. I have setup reth1 ...
2
votes
1answer
566 views

Juniper SRX 1400: Policy to redirect users to custom URL

What I need I have SRX 1400 @ JUNOS 12.3X48-D40.5 Imagine having, among others, following zones: UNTRUSTED-CLIENTS, WORLD and INTRANET. I want to block all traffic from UNTRUSTED-CLIENTS to WORLD, ...
2
votes
1answer
2k views

what command will show my zone address books?

# show security address-book displays the global address books. But I have no global address books I have zone address books. Is there no show command that displays this? I can see it in the GUI: I ...
0
votes
1answer
2k views

How to configure L2TP Client on Juniper SRX?

I have an Juniper SRX 100, running JunOS 12.1X46-D66. I would like to use it to route all Internet traffic through an L2TP tunnel to an ISP called Andrews and Arnold, who offer this as a service. ...
1
vote
1answer
654 views

vSRX : several public addresses on loopback interface

I have an issue when I try to configure several ip addresses on the loopback interface on a vSRX cluster. Here is my setup (in gns3) : vSRX-1 and 2 are in cluster mode. VyOS-1 and 2 are BGP routers ...
1
vote
2answers
873 views

Clear df-bit of incoming packets

How I can clear DF bit from incoming packets on Juniper SRX? As example, on Cisco router it can be done by route-map on ingress interface: route-map clear-df-bit permit 10 match ip address 111 ...
3
votes
3answers
6k views

How do I forward multicast packets over IPSec VPN Tunnel on Juniper SRX?

I have an IPSec site-to-site VPN setup between two SRX300 devices. I am trying to get multicast to travel across. I am looking for the simplest configuration possible to get this setup. I have found ...
1
vote
1answer
434 views

How to set DHCP with VLANs on vSRX (GNS3)?

I tried set DHCP on my host, but it can't find the DHCP server. What am I supposed to do? system { root-authentication { encrypted-password "$1$AZZi5zCr$CoHgrnTOOXUpyaCJm3XLn/"; ## ...
1
vote
1answer
452 views

How do I update a 2nd hand bought Juniper SRX240

I bought a used SRX240 on ebay to learn a bit about it (and use it as a home router). Upon starting it seems it has a very old firmware, so I wanted to update it. So I created an account on juniper....
1
vote
1answer
1k views

Juniper SRX Log Traffic From Source Address

I want to see how much traffic is coming from a class C network into my network. How can have the SRX only output the IP, date and time to a specific file? Class C Network: 201.6.2.0/24 Log file: /...
1
vote
1answer
621 views

Cisco catalyst and Juniper SRX240 vlan routing

I think my understanding of Trunking is off. I have two cisco switches under two vlans, connected to a single SRX240. I have connectivity to the SRX from the switch but not anywhere past it. The ...
1
vote
1answer
883 views

Juniper ZTP DHCP Server Setup

I am currently trying to configure DHCP as part of a ztp setup. Right now my topology is as follows: ex2200(me0,10.0.20.2)->(ge-0/0/1,10.0.20.1)srx100(fe-0/0/2,10.0.80.1)<-(eth0,10.0.80.2)centos6....
2
votes
1answer
414 views

BGP between two SRX210s?

I've been doing some work on the Juniper SRX210 firewalls/routers, and I have been making progress in learning the ins and outs of the OS, but I am having a bit of an issue with BGP. I currently ...
2
votes
1answer
8k views

Can't ping directly connected SRX210 (Juniper)

I'm coming to terms with JunOS, and I have set up a lab that includes two SRX210s. I have set ge-0/0/1 on both devices to: ge-0/0/1 { unit 0 { family inet { address 20.0.0.1/24; } } ....
1
vote
2answers
334 views

Why logical systems?

Juniper supports partitioning of a physical device such as a router into multiple logical systems. Each of these systems could have their independent routing/switching tables depending on the logical ...
3
votes
2answers
429 views

How do you disable IGMP-snooping on virtual nic macvtap

Networking community, Question: How do you disable IGMP-snooping on virtual nic macvtap? Background: We have noticed that Juniper vSRX 15.1X49-D60 (Running on Ubuntu 16.04LTS Server KVM) is ...
0
votes
2answers
795 views

setting up aws vpn with srx110

I'm trying to setup an IPsec vpn to AWS from an SRX 110 and am having some trouble getting it to work. I've download the config file and my tunnels seem to be up, but I can't seem to ping anything in ...
3
votes
1answer
120 views

Bandwidth hogging on managed switched network 17 users

Lately we have been getting bandwidth hogging when any user attempts to download updates / youtube / anything large files. The rest of the network is clogged. We have a fibre 20meg line in. 20meg ...
2
votes
1answer
841 views

Juniper SRX300 cluster

I'm trying to set up chassis cluster on Juniper SRX300 (Junos 15.1X49-D45). And I wasn't able to find any documentation on this matter. I was able to run the command: set chassis cluster cluster-...
1
vote
2answers
2k views

SRX Point-To-Site IPsec VPN Setup

I'm trying to setup an IPsec VPN tunnel between a Debian Jessie system running strongSwan and an SRX. The end goal is to use the Debian host as a reverse-proxy for hosts behind the SRX, which I assume ...