Skip to main content

Questions tagged [srx]

For questions about or involving the Juniper SRX Series routers and firewall solutions. For instance, the Juniper SRX110, SRX220, SRX300 etc.

Filter by
Sorted by
Tagged with
0 votes
1 answer
28 views

QoS on Juniper SRX 320

I'm doing a lab because I need to mark traffic with 802.1p tag to apply QoS on my ISP layer 2 uplink. I've managed to classify my network traffic and did applyed DSCP marking on the packets but I can'...
ichigo vingt-neuf's user avatar
1 vote
1 answer
132 views

Juniper MX with MS-MIC and ipsec performance

I've set up the gre over ipsec tunnel between SRX650 and MX5 (MS-MIC onboard). While SRX is able to serve ipsec tunnels traffic at about 100-200 Mbit/sec to other SRXes, I can get only about 1.5 Mbit/...
drookie's user avatar
  • 243
0 votes
1 answer
217 views

Juniper SRX, workstation on SRX switch port cannot ping reth interface

I have a SRX345 firewall that has a workstation hanging off one of its ethernet ports. The workstation cannot ping the SRX reth interface, reth1.50 (its default gw) even though the ethernet port is ...
Jeff Todd's user avatar
1 vote
1 answer
781 views

Turning Off SPC card on Juniper SRX5800 series Firewall

We are running SRX5800 in a cluster. Each Node has FPCs as well as SPCs installed. Due to some maintenance downtime , we were required to power off FPCs as well as SPCs on a backup node , not in a ...
Nabeel's user avatar
  • 1,130
0 votes
2 answers
1k views

Fixing an SSL problem in Juniper SRX

We do have a problem; we setup a used Juniper SRX3400 Cluster hoping to move our configuration from old SRX3400 Cluster to new one (for some reason), however everything works but we cannot make HTTPS ...
Harun Barış Bulut's user avatar
2 votes
1 answer
1k views

Juniper SRX Application Inactivity Timeout

Will the inactivity timeout set for the application "TCP-ALL" of 900 trump the default value of 1800 for junos-ssh if the application-set were matched in a security policy? Does it matter if the order ...
Ben's user avatar
  • 157
2 votes
1 answer
165 views

Ip telephone being not served by DHCP

I have a DHCP configured on juniper router srx345 and an external DHCP runing on win machine and configured by telephony ppl. I'm using an IP tel Astra i740N when I send DHCP request to DHCP ...
black cup's user avatar
5 votes
1 answer
1k views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
HastDuPasta's user avatar
2 votes
0 answers
82 views

Juniper SRX550 vpn question

First of all, I don't know much about VPNs, so please be patient. I have a Juniper SRX550, and I want users from home to be able to connect to the company network via VPN. The company I work for ...
Matt Damoz's user avatar
1 vote
1 answer
772 views

Can't ping from firewall to Hosts and from Hosts to firewall and host to host

I have a network which consists of several networks. A Firewall is inside this Network and monitor and controle the traffic between the First Network and the Second Network. In my First Network are 3 ...
Mustafa's user avatar
  • 21
1 vote
1 answer
4k views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
Andrey Prokhorov's user avatar
2 votes
1 answer
2k views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
Andrey Prokhorov's user avatar
1 vote
1 answer
864 views

Traffic flow for internal traffic in Juniper SRX 650

I would like to know whether the Juniper SRX by default allows all the source and destination ports if all the devices are from the internal networking range. For eg, Src-10.10.x.x SrcPrt-any Des-10....
Labrathor's user avatar
3 votes
1 answer
2k views

Juniper SRX BGP based ECMP not working as expected

Overview I am trying to setup BGP based ECMP to two end servers that sit on separate subnets/VLANs and advertise out the same IP address to a SRX firewall. The end nodes are linux boxes running BIRD ...
Gareth Hastings's user avatar
2 votes
1 answer
894 views

Juniper SRX 1400: Policy to redirect users to custom URL

What I need I have SRX 1400 @ JUNOS 12.3X48-D40.5 Imagine having, among others, following zones: UNTRUSTED-CLIENTS, WORLD and INTRANET. I want to block all traffic from UNTRUSTED-CLIENTS to WORLD, ...
Michał Sacharewicz's user avatar
2 votes
1 answer
522 views

BGP between two SRX210s?

I've been doing some work on the Juniper SRX210 firewalls/routers, and I have been making progress in learning the ins and outs of the OS, but I am having a bit of an issue with BGP. I currently ...
Dmitriy's user avatar
  • 319
0 votes
1 answer
4k views

SRX FW - Show route - output reject [closed]

Running SRX firewall, and when running command show route, one of the outputs shows as reject could you help in troubleshooting the reason for this 10.14.224.193/32 *[Local/0] 24w6d 22:05:53 ...
JanAroub's user avatar
2 votes
1 answer
13k views

Can't ping directly connected SRX210 (Juniper)

I'm coming to terms with JunOS, and I have set up a lab that includes two SRX210s. I have set ge-0/0/1 on both devices to: ge-0/0/1 { unit 0 { family inet { address 20.0.0.1/24; } } ....
Dmitriy's user avatar
  • 319
1 vote
1 answer
10k views

Configure VLANs on Juniper SRX - cannot figure it out

This must be insanely simple, but I get errors every time. I have a very basic setup. SRX 300 ge-0/0/0 = untrust ge-0/0/1 though ge-0/0/5 = trust ge-0/0/0 and 0/0/4 are in use. I have an access ...
iH8usrnames's user avatar
5 votes
1 answer
489 views

Juniper SRX routing based on Network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31.0 ...
Telerias's user avatar
1 vote
2 answers
3k views

Juniper SRX240 firewall family inet issue on VLAN

Recently we've got a SRX240 router, and I'm doing first steps in understanding JunOS. I want to make really damn simple thing, here is the situation. We've got a huge intranet in our organization, ...
Alexander O.'s user avatar
3 votes
2 answers
3k views

how to setup dual ISP fail over with 2 routers

I have a project which i'm struggling with and wondered if someone can offer some advise on the best way to achieve my goal (i'm new to Juniper). At the moment I have 2 juniper srx240, one connected ...
Adrian's user avatar
  • 41
1 vote
2 answers
1k views

Juniper srx-100-b doesn't boot anymore

I hope someone can help me. this is the case: I have a Juniper srx-100-b and I tried to configure this device completely from scratch. What I have done, in u-boot mode, I perform the command 'erase ...
Ricke912's user avatar
3 votes
0 answers
130 views

I want to combine a hub and spoke VPN with a dialup VPN [closed]

Can I do this with a Juniper SRX-100? I have a combination of corporate office users and remote work from home users. A total of around 30 users with 10 remote work from home. The remote users run ...
Jim Yates's user avatar
1 vote
1 answer
254 views

Juniper SRX-1100 VPN configuration

I want to setup a configuration for a Juniper SRX-1100. I have an office where I need 3 site to site VPNs to two Cisco ASAa and one to a Juniper SSG 5. I also have work at home users who need to ...
Jim Yates's user avatar
1 vote
2 answers
2k views

Two IP ranges, one ISP, one connection, one firewall/router

We have a straight forward internet connection which has a small /29 IP range. The connection is Ethernet and our default gateway is the first IP in the /29 range. Our ISP has just given us a ...
Gareth Hastings's user avatar
1 vote
0 answers
281 views

Subnet delegated prefix on SRX

I configured a Juniper SRX firewall to receive IPv6 prefix from upstream router: family inet6 { dhcpv6-client { client-type statefull; client-ia-...
Lingfeng Xiong's user avatar
3 votes
1 answer
575 views

How to get around "configure one application-ddos definition for each protected server" in Juniper SRX IDP?

When using an SRX (we have a 1400) to protect a server we can create an application-ddos rule for DNS, but what if we want to protect it against SQL exploit attempts like "SaAdmin" login attempts? In ...
danno's user avatar
  • 381
4 votes
2 answers
4k views

Juniper SRX blank proxy-identity

I would really appreciate some clarification in the following matter. What I'm seeing I'm looking at two different SRX210 firewalls and specifically at their ipsec stanza. I'm seeing the following ...
Anton Flärd's user avatar
7 votes
2 answers
2k views

Juniper SRX - No traffic after 17 minutes

This is really a strange problem. I am trying to install a Juniper SRX 220H as the gateway to replace my old Cisco router in my testing network environment. The simplified topology is listed below: ...
Lingfeng Xiong's user avatar
3 votes
1 answer
5k views

Juniper SRX One VLAN Across Multiple reth Interfaces without Intra-zone Policy

I'm looking to see if it is possible to have one VLAN span multiple reth interfaces without needing to do intra-zone security policies (from-zone A to-zone A). The idea is that I have the SRX240 ...
ryanklein's user avatar
  • 178
3 votes
1 answer
5k views

How can I see what interfaces belong to the default routing instance on the SRX?

I'm working with routing instances on the Juniper SRX. When you configure NAT you have the option to specify "to" and "from" statements, with these option you can specify NAT to translate to or from a ...
Harnik's user avatar
  • 433
6 votes
4 answers
4k views

DHCPv6 (with PD) client on Juniper SRX

OK, this one may technically be off-topic since I'm actually doing this at home, but I could easily see the exact same scenario arises in a small enterprise type of setup... Using an SRX210 to be a ...
Jeff McAdams's user avatar
  • 2,496
5 votes
2 answers
624 views

Newer JunOS Versions numbers

What is the meaning of the new JunOS version numbers in the 12.1 line? 12.1X44 12.1X45 12.1X46 What does the XNN mean? How can I tell which one I want?
bahamat's user avatar
  • 867
6 votes
1 answer
2k views

SRX100 in bootloop. Flash storage problem?

About a month ago one of my SRX100 started to go into a bootloop for no obvious reason to me. After some hours, it eventually stopped and booted up the system again (primary) and I was happy that I ...
xeet's user avatar
  • 173
5 votes
2 answers
480 views

Juniper SRX security utm missing

I've been trying to set up local web-filtering (no license required, right?) on customer's SRX 240. Every guide that I had managed to find said that it was to be configured under "edit security utm". ...
Pavel Glushkov's user avatar
6 votes
3 answers
3k views

How to log out of state sessions on Juniper SRX platform?

I am really having trouble to get our SRXes to log sessions that are not in the state table and get dropped because of that. For example, if you reboot the firewall and some old NFS implementation ...
cryptochrome's user avatar