Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

For questions about or involving the Juniper SRX Series routers and firewall solutions. For instance, the Juniper SRX110, SRX220, SRX300 etc.

0
votes
1answer
16 views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
1
vote
1answer
45 views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
1
vote
1answer
56 views

Traffic flow for internal traffic in Juniper SRX 650

I would like to know whether the Juniper SRX by default allows all the source and destination ports if all the devices are from the internal networking range. For eg, Src-10.10.x.x SrcPrt-any Des-10....
2
votes
1answer
275 views

Juniper SRX BGP based ECMP not working as expected

Overview I am trying to setup BGP based ECMP to two end servers that sit on separate subnets/VLANs and advertise out the same IP address to a SRX firewall. The end nodes are linux boxes running BIRD ...
2
votes
1answer
240 views

Juniper SRX 1400: Policy to redirect users to custom URL

What I need I have SRX 1400 @ JUNOS 12.3X48-D40.5 Imagine having, among others, following zones: UNTRUSTED-CLIENTS, WORLD and INTRANET. I want to block all traffic from UNTRUSTED-CLIENTS to WORLD, ...
2
votes
1answer
149 views

BGP between two SRX210s?

I've been doing some work on the Juniper SRX210 firewalls/routers, and I have been making progress in learning the ins and outs of the OS, but I am having a bit of an issue with BGP. I currently ...
0
votes
1answer
833 views

SRX FW - Show route - output reject [closed]

Running SRX firewall, and when running command show route, one of the outputs shows as reject could you help in troubleshooting the reason for this 10.14.224.193/32 *[Local/0] 24w6d 22:05:53 ...
2
votes
1answer
3k views

Can't ping directly connected SRX210 (Juniper)

I'm coming to terms with JunOS, and I have set up a lab that includes two SRX210s. I have set ge-0/0/1 on both devices to: ge-0/0/1 { unit 0 { family inet { address 20.0.0.1/24; } } ....
1
vote
1answer
3k views

Configure VLANs on Juniper SRX - cannot figure it out

This must be insanely simple, but I get errors every time. I have a very basic setup. SRX 300 ge-0/0/0 = untrust ge-0/0/1 though ge-0/0/5 = trust ge-0/0/0 and 0/0/4 are in use. I have an access ...
5
votes
1answer
179 views

Juniper SRX routing based on Network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31.0 ...
0
votes
2answers
2k views

Juniper SRX240 firewall family inet issue on VLAN

Recently we've got a SRX240 router, and I'm doing first steps in understanding JunOS. I want to make really damn simple thing, here is the situation. We've got a huge intranet in our organization, ...
3
votes
2answers
1k views

how to setup dual ISP fail over with 2 routers

I have a project which i'm struggling with and wondered if someone can offer some advise on the best way to achieve my goal (i'm new to Juniper). At the moment I have 2 juniper srx240, one connected ...
1
vote
2answers
509 views

Juniper srx-100-b doesn't boot anymore

I hope someone can help me. this is the case: I have a Juniper srx-100-b and I tried to configure this device completely from scratch. What I have done, in u-boot mode, I perform the command 'erase ...
2
votes
0answers
77 views

I want to combine a hub and spoke VPN with a dialup VPN

Can I do this with a Juniper SRX-100? I have a combination of corporate office users and remote work from home users. A total of around 30 users with 10 remote work from home. The remote users run ...
1
vote
1answer
160 views

Juniper SRX-1100 VPN configuration

I want to setup a configuration for a Juniper SRX-1100. I have an office where I need 3 site to site VPNs to two Cisco ASAa and one to a Juniper SSG 5. I also have work at home users who need to ...
1
vote
2answers
754 views

Two IP ranges, one ISP, one connection, one firewall/router

We have a straight forward internet connection which has a small /29 IP range. The connection is Ethernet and our default gateway is the first IP in the /29 range. Our ISP has just given us a ...
1
vote
0answers
140 views

Subnet delegated prefix on SRX

I configured a Juniper SRX firewall to receive IPv6 prefix from upstream router: family inet6 { dhcpv6-client { client-type statefull; client-ia-...
2
votes
1answer
431 views

How to get around “configure one application-ddos definition for each protected server” in Juniper SRX IDP?

When using an SRX (we have a 1400) to protect a server we can create an application-ddos rule for DNS, but what if we want to protect it against SQL exploit attempts like "SaAdmin" login attempts? In ...
2
votes
2answers
2k views

Juniper SRX blank proxy-identity

I would really appreciate some clarification in the following matter. What I'm seeing I'm looking at two different SRX210 firewalls and specifically at their ipsec stanza. I'm seeing the following ...
6
votes
2answers
1k views

Juniper SRX - No traffic after 17 minutes

This is really a strange problem. I am trying to install a Juniper SRX 220H as the gateway to replace my old Cisco router in my testing network environment. The simplified topology is listed below: ...
1
vote
1answer
4k views

Juniper SRX One VLAN Across Multiple reth Interfaces without Intra-zone Policy

I'm looking to see if it is possible to have one VLAN span multiple reth interfaces without needing to do intra-zone security policies (from-zone A to-zone A). The idea is that I have the SRX240 ...
2
votes
1answer
4k views

How can I see what interfaces belong to the default routing instance on the SRX?

I'm working with routing instances on the Juniper SRX. When you configure NAT you have the option to specify "to" and "from" statements, with these option you can specify NAT to translate to or from a ...
5
votes
4answers
3k views

DHCPv6 (with PD) client on Juniper SRX

OK, this one may technically be off-topic since I'm actually doing this at home, but I could easily see the exact same scenario arises in a small enterprise type of setup... Using an SRX210 to be a ...
3
votes
2answers
552 views

Newer JunOS Versions numbers

What is the meaning of the new JunOS version numbers in the 12.1 line? 12.1X44 12.1X45 12.1X46 What does the XNN mean? How can I tell which one I want?
4
votes
1answer
1k views

SRX100 in bootloop. Flash storage problem?

About a month ago one of my SRX100 started to go into a bootloop for no obvious reason to me. After some hours, it eventually stopped and booted up the system again (primary) and I was happy that I ...
3
votes
2answers
399 views

Juniper SRX security utm missing

I've been trying to set up local web-filtering (no license required, right?) on customer's SRX 240. Every guide that I had managed to find said that it was to be configured under "edit security utm". ...
5
votes
3answers
2k views

How to log out of state sessions on Juniper SRX platform?

I am really having trouble to get our SRXes to log sessions that are not in the state table and get dropped because of that. For example, if you reboot the firewall and some old NFS implementation ...