Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [juniper-srx]

The Juniper SRX is a series of security services devices running Junos. Security features include the full UTM functionality previously found on ScreenOS, including web filtering, IDP and anti-virus. Although high-end and low-end SRX platforms differ in the underlying hardware, common software base enables feature consistency and signature Juniper routing code.

Filter by
Sorted by
Tagged with
1
vote
2answers
42 views

SRX to ASA IPSec troubles

we built a VPN between partner's Cisco ASA (unknown version) and my Juniper SRX 340. The tunnel seems to go up properly: root@fw01> show security ike security-associations node0: ----------------...
0
votes
1answer
53 views

Juniper SRX 340 configuration import/export

Good morning, I have a Juniper SRX 340 Cluster (15.1X49-D70.3) in a professional environment, and a third firewall (same model) that I'd like to use as a test firewall. Is there any simple way to ...
1
vote
1answer
75 views

Juniper port forward range of ports with dynamic pppoe

I have Juniper SRX300. Due to some restrictions, i can't use static WAN IP address. I need to port forward a range of ports and it's working only using nat static section like this: username# show ...
4
votes
2answers
249 views

Juniper SRX answers all ping requests instead of forwarding

I have about 4 different subnetworks at my place, when i'm trying to ping to static device in subnetwork1 from subnetwork2 i always see that device pings, even if it's off. I assume my SRX300 answers ...
1
vote
0answers
50 views

Juniper SRX sniffing

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug. I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
4
votes
1answer
180 views

Dump traffic on routing-instance with a Juniper SRX firewall

A Juniper firewall can display data with the tcpdump command: % tcpdump -i ge-0/0/0 % tcpdump -i vlan10 However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
4
votes
1answer
486 views

Advertise all static route except the default gateway with Juniper SRX firewall

With the following policy, all static routes are advertised via BGP to my neighbor: root@Nitrogen# show policy-options policy-statement bgp-export-policy { term export-statics { from ...
4
votes
1answer
318 views

IPv6 default route not being installed from RA

Platform: Juniper SRX300 Version: JUNOS 15.1X49-D160.2 ISP: Midco I currently have an issue where the IPv6 default route is not being installed from the CMTS RA. Try as I might, I cannot get ...
3
votes
1answer
75 views

Site-2-Site Juniper SRX & Zywall

I've a Juniper SRX 340 on my datacenter and a Zywall USG 100 on my office. I'd like to build a site-to-site VPN between them, but after a lot of tries I can't still reach the result. This is the ...
3
votes
1answer
61 views

Juniper MX/SRX series interface monitoring command

Good morning all, I was curious due to an issue were currently troubleshooting in our environment if there is a command in Juniper that will allow us to determine the utilization percentage of an ...
1
vote
1answer
281 views

IPSec route-based vpn st0 interface

As i know, the st0 interface is used when the gateways are configured with route based VPN. But my question is, say below is the topology A<---->B<---->C<---->D A and D are hosts, B and C ...
3
votes
1answer
264 views

Juniper SRX320 Dynamic VPN, cannot route to Remote-Protected-Resource

Multiple VPNs setup with a Juniper SRX320. The SRX320 has an irb interface as follows: irb { unit 0 { family inet { address 192.168.120.1/24; } } } I've setup ...
0
votes
1answer
34 views

faild hardware address for ifd ge-0/0/0 failed on junos-vsrx-12.1X47-D20.7-domestic vmware machine

I have been trying to configure dhcp client on ge-0/0/0, I have asked a question before about it in this link At first the solution provided worked, but when I started the virtual machine again it ...
4
votes
2answers
218 views

Juniper SR300 maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
3
votes
1answer
218 views

Configuring DHCP on Juniper junos-vsrx-12.1X47-D20.7-domestic on vmware

I'm preparing for JNCIS-SEC exam. I used junos-vsrx-12.1X47-D20.7-domestic image to create virtual machine in order to practice for the exam. I am following this to configure the vsrx. When I do the ...
4
votes
1answer
566 views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
3
votes
1answer
1k views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
1
vote
1answer
116 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
3
votes
1answer
517 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
2
votes
1answer
128 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
3
votes
1answer
325 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.
0
votes
1answer
216 views

Juniper SRX 240H latency going on with HA Cluster. Are there any steps to troubleshoot the issue?

Currently we are having a latency issue between a Juniper HA cluster and a Cisco switch c3750. We have LACP configured between them. reth3 { vlan-tagging; redundant-ether-options { redundancy-group 1;...
3
votes
1answer
925 views

Connecting an SRX chassis cluster to redundant upstream WAN links

I've been tasked with migrating some Juniper SSG 140's in an active/passive cluster to an SRX 340 cluster. I'm very familiar with ScreenOS, but am still learning JunOS. Currently, we're connected to ...
2
votes
1answer
88 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...
1
vote
0answers
533 views

2x Juniper SRX300 RETH interface on multiple interfaces [closed]

We have two SRX300 boxes in a chassis cluster. I have configured the RETH0 interface for WAN communication and assigned 1 port on the first unit and 1 port at the second unit. I have setup reth1 ...
2
votes
1answer
486 views

Juniper SRX 1400: Policy to redirect users to custom URL

What I need I have SRX 1400 @ JUNOS 12.3X48-D40.5 Imagine having, among others, following zones: UNTRUSTED-CLIENTS, WORLD and INTRANET. I want to block all traffic from UNTRUSTED-CLIENTS to WORLD, ...
2
votes
1answer
2k views

what command will show my zone address books?

# show security address-book displays the global address books. But I have no global address books I have zone address books. Is there no show command that displays this? I can see it in the GUI: I ...
0
votes
1answer
1k views

How to configure L2TP Client on Juniper SRX?

I have an Juniper SRX 100, running JunOS 12.1X46-D66. I would like to use it to route all Internet traffic through an L2TP tunnel to an ISP called Andrews and Arnold, who offer this as a service. ...
1
vote
1answer
546 views

vSRX : several public addresses on loopback interface

I have an issue when I try to configure several ip addresses on the loopback interface on a vSRX cluster. Here is my setup (in gns3) : vSRX-1 and 2 are in cluster mode. VyOS-1 and 2 are BGP routers ...
1
vote
2answers
669 views

Clear df-bit of incoming packets

How I can clear DF bit from incoming packets on Juniper SRX? As example, on Cisco router it can be done by route-map on ingress interface: route-map clear-df-bit permit 10 match ip address 111 ...
3
votes
3answers
5k views

How do I forward multicast packets over IPSec VPN Tunnel on Juniper SRX?

I have an IPSec site-to-site VPN setup between two SRX300 devices. I am trying to get multicast to travel across. I am looking for the simplest configuration possible to get this setup. I have found ...
1
vote
1answer
394 views

How to set DHCP with VLANs on vSRX (GNS3)?

I tried set DHCP on my host, but it can't find the DHCP server. What am I supposed to do? system { root-authentication { encrypted-password "$1$AZZi5zCr$CoHgrnTOOXUpyaCJm3XLn/"; ## ...
1
vote
1answer
419 views

How do I update a 2nd hand bought Juniper SRX240

I bought a used SRX240 on ebay to learn a bit about it (and use it as a home router). Upon starting it seems it has a very old firmware, so I wanted to update it. So I created an account on juniper....
1
vote
1answer
781 views

Juniper SRX Log Traffic From Source Address

I want to see how much traffic is coming from a class C network into my network. How can have the SRX only output the IP, date and time to a specific file? Class C Network: 201.6.2.0/24 Log file: /...
1
vote
1answer
525 views

Cisco catalyst and Juniper SRX240 vlan routing

I think my understanding of Trunking is off. I have two cisco switches under two vlans, connected to a single SRX240. I have connectivity to the SRX from the switch but not anywhere past it. The ...
1
vote
1answer
764 views

Juniper ZTP DHCP Server Setup

I am currently trying to configure DHCP as part of a ztp setup. Right now my topology is as follows: ex2200(me0,10.0.20.2)->(ge-0/0/1,10.0.20.1)srx100(fe-0/0/2,10.0.80.1)<-(eth0,10.0.80.2)centos6....
2
votes
1answer
359 views

BGP between two SRX210s?

I've been doing some work on the Juniper SRX210 firewalls/routers, and I have been making progress in learning the ins and outs of the OS, but I am having a bit of an issue with BGP. I currently ...
2
votes
1answer
7k views

Can't ping directly connected SRX210 (Juniper)

I'm coming to terms with JunOS, and I have set up a lab that includes two SRX210s. I have set ge-0/0/1 on both devices to: ge-0/0/1 { unit 0 { family inet { address 20.0.0.1/24; } } ....
1
vote
2answers
298 views

Why logical systems?

Juniper supports partitioning of a physical device such as a router into multiple logical systems. Each of these systems could have their independent routing/switching tables depending on the logical ...
2
votes
2answers
326 views

How do you disable IGMP-snooping on virtual nic macvtap

Networking community, Question: How do you disable IGMP-snooping on virtual nic macvtap? Background: We have noticed that Juniper vSRX 15.1X49-D60 (Running on Ubuntu 16.04LTS Server KVM) is ...
0
votes
2answers
732 views

setting up aws vpn with srx110

I'm trying to setup an IPsec vpn to AWS from an SRX 110 and am having some trouble getting it to work. I've download the config file and my tunnels seem to be up, but I can't seem to ping anything in ...
3
votes
1answer
115 views

Bandwidth hogging on managed switched network 17 users

Lately we have been getting bandwidth hogging when any user attempts to download updates / youtube / anything large files. The rest of the network is clogged. We have a fibre 20meg line in. 20meg ...
2
votes
1answer
811 views

Juniper SRX300 cluster

I'm trying to set up chassis cluster on Juniper SRX300 (Junos 15.1X49-D45). And I wasn't able to find any documentation on this matter. I was able to run the command: set chassis cluster cluster-...
1
vote
2answers
1k views

SRX Point-To-Site IPsec VPN Setup

I'm trying to setup an IPsec VPN tunnel between a Debian Jessie system running strongSwan and an SRX. The end goal is to use the Debian host as a reverse-proxy for hosts behind the SRX, which I assume ...
1
vote
2answers
2k views

Juniper SRX Lower Maximum Sessions

On my SRX 1400 I see maximum sessions here: show security flow session summary This is what shows up now: Unicast-sessions: 46795 Multicast-sessions: 0 Services-offload-sessions: 0 Failed-sessions: ...
1
vote
1answer
176 views

Juniper SRX650: redundantly connected locations and asymmetric routing

I currently have a total of 4 locations with clustered SRX650's. Each location also has redundant internet connections. We'll call the locations Office1, Office2, DC1, DC2. Currently the offices are ...
1
vote
1answer
346 views

Juniper JUNOS security policy incorrectly blocking traffic that is explicitly permitted

Running Juniper SRX device. Within a routing-instance, I removed two /25 static routes and replaced it with a single /24 static route. This /24 static route starts on the same IP, just a bigger ...
3
votes
1answer
6k views

Cannot access web management through HTTPS despite being configured

I'm configuring a Juniper SRX240 router, and I wanted to set up the HTTPS protocol for web management, as opposed to plain HTTP which is working fine. I configure HTTPS as documented here, but ...
1
vote
1answer
1k views

Juniper routing - one way communication

I have an SRX3600 and an EX2200. I can ping everything on the EX2200 from the SRX, but I can't ping the gateway (or anything else) on the SRX from the EX. Another set of eyes would be wonderful. ...
1
vote
2answers
776 views

Juniper srx-100-b doesn't boot anymore

I hope someone can help me. this is the case: I have a Juniper srx-100-b and I tried to configure this device completely from scratch. What I have done, in u-boot mode, I perform the command 'erase ...