Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [juniper-srx]

The Juniper SRX is a series of security services devices running Junos. Security features include the full UTM functionality previously found on ScreenOS, including web filtering, IDP and anti-virus. Although high-end and low-end SRX platforms differ in the underlying hardware, common software base enables feature consistency and signature Juniper routing code.

1
vote
1answer
40 views

Juniper SRX answers all ping requests instead of forwarding

I have about 4 different subnetworks at my place, when i'm trying to ping to static device in subnetwork1 from subnetwork2 i always see that device pings, even if it's off. I assume my SRX300 answers ...
1
vote
0answers
27 views

Juniper SRX sniffing

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug. I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
4
votes
1answer
81 views

Dump traffic on routing-instance with a Juniper SRX firewall

A Juniper firewall can display data with the tcpdump command: % tcpdump -i ge-0/0/0 % tcpdump -i vlan10 However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
3
votes
1answer
114 views

Advertise all static route except the default gateway with Juniper SRX firewall

With the following policy, all static routes are advertised via BGP to my neighbor: root@Nitrogen# show policy-options policy-statement bgp-export-policy { term export-statics { from ...
4
votes
1answer
105 views

IPv6 default route not being installed from RA

Platform: Juniper SRX300 Version: JUNOS 15.1X49-D160.2 ISP: Midco I currently have an issue where the IPv6 default route is not being installed from the CMTS RA. Try as I might, I cannot get ...
3
votes
1answer
45 views

Site-2-Site Juniper SRX & Zywall

I've a Juniper SRX 340 on my datacenter and a Zywall USG 100 on my office. I'd like to build a site-to-site VPN between them, but after a lot of tries I can't still reach the result. This is the ...
3
votes
1answer
40 views

Juniper MX/SRX series interface monitoring command

Good morning all, I was curious due to an issue were currently troubleshooting in our environment if there is a command in Juniper that will allow us to determine the utilization percentage of an ...
1
vote
1answer
48 views

IPSec route-based vpn st0 interface

As i know, the st0 interface is used when the gateways are configured with route based VPN. But my question is, say below is the topology A<---->B<---->C<---->D A and D are hosts, B and C ...
3
votes
1answer
132 views

Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource

Multiple VPNs setup with a Juniper SRX320. The SRX320 has an irb interface as follows: irb { unit 0 { family inet { address 192.168.120.1/24; } } } I've setup ...
0
votes
1answer
23 views

faild hardware address for ifd ge-0/0/0 failed on junos-vsrx-12.1X47-D20.7-domestic vmware machine

I have been trying to configure dhcp client on ge-0/0/0, I have asked a question before about it in this link At first the solution provided worked, but when I started the virtual machine again it ...
4
votes
2answers
78 views

Juniper SR300 maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
3
votes
1answer
126 views

Configuring DHCP on Juniper junos-vsrx-12.1X47-D20.7-domestic on vmware

I'm preparing for JNCIS-SEC exam. I used junos-vsrx-12.1X47-D20.7-domestic image to create virtual machine in order to practice for the exam. I am following this to configure the vsrx. When I do the ...
4
votes
1answer
335 views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
3
votes
1answer
726 views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
1
vote
1answer
84 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
3
votes
1answer
361 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
1
vote
1answer
103 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
3
votes
1answer
251 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.
0
votes
1answer
167 views

Juniper SRX 240H latency going on with HA Cluster. Are there any steps to troubleshoot the issue?

Currently we are having a latency issue between a Juniper HA cluster and a Cisco switch c3750. We have LACP configured between them. reth3 { vlan-tagging; redundant-ether-options { redundancy-group 1;...
2
votes
1answer
731 views

Connecting an SRX chassis cluster to redundant upstream WAN links

I've been tasked with migrating some Juniper SSG 140's in an active/passive cluster to an SRX 340 cluster. I'm very familiar with ScreenOS, but am still learning JunOS. Currently, we're connected to ...
2
votes
1answer
81 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...
1
vote
0answers
415 views

2x Juniper SRX300 RETH interface on multiple interfaces [closed]

We have two SRX300 boxes in a chassis cluster. I have configured the RETH0 interface for WAN communication and assigned 1 port on the first unit and 1 port at the second unit. I have setup reth1 ...
2
votes
1answer
410 views

Juniper SRX 1400: Policy to redirect users to custom URL

What I need I have SRX 1400 @ JUNOS 12.3X48-D40.5 Imagine having, among others, following zones: UNTRUSTED-CLIENTS, WORLD and INTRANET. I want to block all traffic from UNTRUSTED-CLIENTS to WORLD, ...
3
votes
1answer
1k views

what command will show my zone address books?

# show security address-book displays the global address books. But I have no global address books I have zone address books. Is there no show command that displays this? I can see it in the GUI: I ...
0
votes
1answer
1k views

How to configure L2TP Client on Juniper SRX?

I have an Juniper SRX 100, running JunOS 12.1X46-D66. I would like to use it to route all Internet traffic through an L2TP tunnel to an ISP called Andrews and Arnold, who offer this as a service. ...
1
vote
1answer
473 views

vSRX : several public addresses on loopback interface

I have an issue when I try to configure several ip addresses on the loopback interface on a vSRX cluster. Here is my setup (in gns3) : vSRX-1 and 2 are in cluster mode. VyOS-1 and 2 are BGP routers ...
1
vote
2answers
572 views

Clear df-bit of incoming packets

How I can clear DF bit from incoming packets on Juniper SRX? As example, on Cisco router it can be done by route-map on ingress interface: route-map clear-df-bit permit 10 match ip address 111 ...
2
votes
3answers
4k views

How do I forward multicast packets over IPSec VPN Tunnel on Juniper SRX?

I have an IPSec site-to-site VPN setup between two SRX300 devices. I am trying to get multicast to travel across. I am looking for the simplest configuration possible to get this setup. I have found ...
1
vote
1answer
332 views

How to set DHCP with VLANs on vSRX (GNS3)?

I tried set DHCP on my host, but it can't find the DHCP server. What am I supposed to do? system { root-authentication { encrypted-password "$1$AZZi5zCr$CoHgrnTOOXUpyaCJm3XLn/"; ## ...
1
vote
1answer
369 views

How do I update a 2nd hand bought Juniper SRX240

I bought a used SRX240 on ebay to learn a bit about it (and use it as a home router). Upon starting it seems it has a very old firmware, so I wanted to update it. So I created an account on juniper....
1
vote
1answer
609 views

Juniper SRX Log Traffic From Source Address

I want to see how much traffic is coming from a class C network into my network. How can have the SRX only output the IP, date and time to a specific file? Class C Network: 201.6.2.0/24 Log file: /...
1
vote
1answer
426 views

Cisco catalyst and Juniper SRX240 vlan routing

I think my understanding of Trunking is off. I have two cisco switches under two vlans, connected to a single SRX240. I have connectivity to the SRX from the switch but not anywhere past it. The ...
1
vote
1answer
640 views

Juniper ZTP DHCP Server Setup

I am currently trying to configure DHCP as part of a ztp setup. Right now my topology is as follows: ex2200(me0,10.0.20.2)->(ge-0/0/1,10.0.20.1)srx100(fe-0/0/2,10.0.80.1)<-(eth0,10.0.80.2)centos6....
2
votes
1answer
287 views

BGP between two SRX210s?

I've been doing some work on the Juniper SRX210 firewalls/routers, and I have been making progress in learning the ins and outs of the OS, but I am having a bit of an issue with BGP. I currently ...
2
votes
1answer
6k views

Can't ping directly connected SRX210 (Juniper)

I'm coming to terms with JunOS, and I have set up a lab that includes two SRX210s. I have set ge-0/0/1 on both devices to: ge-0/0/1 { unit 0 { family inet { address 20.0.0.1/24; } } ....
1
vote
2answers
281 views

Why logical systems?

Juniper supports partitioning of a physical device such as a router into multiple logical systems. Each of these systems could have their independent routing/switching tables depending on the logical ...
2
votes
2answers
295 views

How do you disable IGMP-snooping on virtual nic macvtap

Networking community, Question: How do you disable IGMP-snooping on virtual nic macvtap? Background: We have noticed that Juniper vSRX 15.1X49-D60 (Running on Ubuntu 16.04LTS Server KVM) is ...
0
votes
2answers
657 views

setting up aws vpn with srx110

I'm trying to setup an IPsec vpn to AWS from an SRX 110 and am having some trouble getting it to work. I've download the config file and my tunnels seem to be up, but I can't seem to ping anything in ...
3
votes
1answer
107 views

Bandwidth hogging on managed switched network 17 users

Lately we have been getting bandwidth hogging when any user attempts to download updates / youtube / anything large files. The rest of the network is clogged. We have a fibre 20meg line in. 20meg ...
2
votes
1answer
753 views

Juniper SRX300 cluster

I'm trying to set up chassis cluster on Juniper SRX300 (Junos 15.1X49-D45). And I wasn't able to find any documentation on this matter. I was able to run the command: set chassis cluster cluster-...
1
vote
2answers
1k views

SRX Point-To-Site IPsec VPN Setup

I'm trying to setup an IPsec VPN tunnel between a Debian Jessie system running strongSwan and an SRX. The end goal is to use the Debian host as a reverse-proxy for hosts behind the SRX, which I assume ...
1
vote
2answers
1k views

Juniper SRX Lower Maximum Sessions

On my SRX 1400 I see maximum sessions here: show security flow session summary This is what shows up now: Unicast-sessions: 46795 Multicast-sessions: 0 Services-offload-sessions: 0 Failed-sessions: ...
1
vote
1answer
158 views

Juniper SRX650: redundantly connected locations and asymmetric routing

I currently have a total of 4 locations with clustered SRX650's. Each location also has redundant internet connections. We'll call the locations Office1, Office2, DC1, DC2. Currently the offices are ...
1
vote
1answer
290 views

Juniper JUNOS security policy incorrectly blocking traffic that is explicitly permitted

Running Juniper SRX device. Within a routing-instance, I removed two /25 static routes and replaced it with a single /24 static route. This /24 static route starts on the same IP, just a bigger ...
3
votes
1answer
6k views

Cannot access web management through HTTPS despite being configured

I'm configuring a Juniper SRX240 router, and I wanted to set up the HTTPS protocol for web management, as opposed to plain HTTP which is working fine. I configure HTTPS as documented here, but ...
1
vote
1answer
1k views

Juniper routing - one way communication

I have an SRX3600 and an EX2200. I can ping everything on the EX2200 from the SRX, but I can't ping the gateway (or anything else) on the SRX from the EX. Another set of eyes would be wonderful. ...
1
vote
2answers
689 views

Juniper srx-100-b doesn't boot anymore

I hope someone can help me. this is the case: I have a Juniper srx-100-b and I tried to configure this device completely from scratch. What I have done, in u-boot mode, I perform the command 'erase ...
2
votes
1answer
76 views

=> sign is showing in juniper srx100

After booting the device, "=>" sign is showing in Juniper SRX 100 router please support. We are trying hard to restore the OS, but still failed, kindly support us urgently.
2
votes
1answer
892 views

Juniper SRX-240. Single Address Translation

Edit Feb 4 The issue remains relevant, any help appreciated. Once again, I'm not a network engineer, so this must be a noob question. Simple task: I have a server in my private network and I need to ...
0
votes
3answers
524 views

Juniper SRX to core switch and distribution. Transparent (L2) mode vs. routing mode

We have to plug two brand new Juniper SRX firewalls to the core switches, and I'm tasked with the research for what's the best mode of operation for the FW, either transparent mode or routing mode. ...