Questions tagged [srx]
SRX refers to a serie of network security producs by Juniper Networks. High-End and Low-End SRX devices use different hardware, but both run the JunOS operating system causing a consistent software interface.
28
questions
1
vote
1
answer
2k
views
Juniper SRX IPSec tunnel to Microsoft Azure Dropping
I'm a bit stumped and was hoping to find some guidance here.
I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
1
answer
897
views
azure forced tunneling - route all traffic back through on prem firewall
configured a site to site vpn with azure and on prem juniper srx firewall. traffic in both direction is working.
configured forced tunneling to route azure vm internet traffic too through on-prem ...
0
votes
0
answers
269
views
Objects in firewall filters on Juniper devices
Greetings and sorry for my English.
I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual ...
1
vote
0
answers
405
views
Juniper SRX300 Maximum BGP routes
I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
0
votes
1
answer
232
views
SRX Juniper port forwarding
I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried:
set security zones security-zone trust ...
0
votes
0
answers
310
views
Source NAT on Juniper SRX300
I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
1
vote
0
answers
305
views
Separate Azure S2S VPN tunnel per subnet with Juniper SRX
It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback!
GOAL:
In Azure, I ...
0
votes
0
answers
649
views
Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up
So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
0
votes
0
answers
752
views
Can Juniper SRX300 act as VPN Client/SOHO Router?
I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
0
votes
2
answers
658
views
Active Directory & SRX - User Groups
I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
1
vote
1
answer
25k
views
SRX220: Cant ping between hosts in directly attached networks through SRX
I have such lab: SRX220H and 2 hosts.
Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24);
Host2 (IP-address 10.10.1.100/24) connected to SRX ...
0
votes
1
answer
2k
views
IPsec tunnel won't stay up
I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about ...
1
vote
2
answers
332
views
Juniper SRX routing based on network
So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
0
votes
2
answers
1k
views
I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet
I'm new to Juniper and need some troubleshooting help. I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet (192.168.10.0/24)....
2
votes
2
answers
403
views
Testing VPN from same network I want to VPN into
This is a general question. I'm building a VPN for my work network on a Juniper SRX firewall, and I need to troubleshoot it.
Right now, I have to walk to a cafe or library to test it and then go ...
0
votes
1
answer
6k
views
Juniper SRX DNS lookup in Trusted zone is not working
I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet....
Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
0
votes
1
answer
3k
views
Is there a benefit from using an IPS for outgoing traffic?
It's probably a stupid question, but still may be it will be useful not only for me.
I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
0
votes
0
answers
60
views
How to connect internal IPv6 to IPv4 network
For the past few days Im having "fun" checking different NAT configuration options on srx240. Im looking for a way to enable lab PC connection to internet.
Is it possible with this spec, or do I have ...
0
votes
0
answers
1k
views
Juniper SRX 240 dynamic VPN soft timeout
I have been struggling with this for over 2 weeks now and tried everything i possibly can.
The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0
votes
0
answers
2k
views
Wierd traceroute / ICMP issues on Juniper SRX 210BE
I recently acquired Juniper SRX 210BE; until now I've been using Cisco ASA 5505 but I really want to switch over to Juniper world (big FreeBSD fan and all that).
I've got FTTC (fiber to the cabnet) ...
0
votes
0
answers
1k
views
Need advice on Juniper OSPF networking
I have been thrown in to this project because of a coworker's termination.
I have a set of Juniper SRX 550 Routers. I need to create an OSPF network that passes all traffic (All subnets) as if it ...
0
votes
1
answer
2k
views
Juniper with multiple DHCP pool connected to Cisco switch
Newbie question:
In our law office we have the following setup: Juniper SRX connected to Cisco L3 switch via trunk port.
Cisco switch has:
VLAN 5 range: 10.4.0.10 - 250 /24
VLAN 6 range: 10.5.0....
0
votes
1
answer
203
views
cannot access srx220 router from browser
I can't access my SRX220 juniper router from any browser. It hangs for a long time and shows a message like
No data Received.
I can access it through cli prompt and can see the logs. All web ...
-3
votes
2
answers
3k
views
Access to vCenter Server (in private network) from the Internet through vSphere Client [closed]
I have a vCenter server as a VM on my DPER710 in my internal network. DPE is connected to switch, switch is connected to JSRX, JSRX is connected to my ISP.
My vCenter Server is installed on Windows ...
3
votes
1
answer
5k
views
How to get Juniper SRX220 to respond to multiple IP Addresses
How can I get an SRX220 to respond to multiple ip addresses on same subnet, but with different gateways.
e.g.,
Subnet: 1.1.1.40/30 (.41 gateway, .42 actual ip)
Subnet: 1.1.1.44/30 (.45 gateway, .46 ...
0
votes
2
answers
297
views
Is there a Juniper limitation on the number of SA in 'any to any' ACL in IKEv1
I've connected Juniper SRX5800 and another enodeB device (don't know the vendor) by an IPSec tunnel. It uses IKEv1 for negotiation of keys. there are 10 ACLs on the enodeB side and on Juniper SRX, I ...
0
votes
1
answer
1k
views
Packetloss in Juniper SRX with gigether-options loopback enabled
I have run into an interesting problem with a Juniper SRX 240 box. The box is running BGP as a border router, and is announcing a /24. To ensure that the vlan with the network stayed "up" I set the ...
0
votes
1
answer
5k
views
How to route all network traffic for vlan through a proxy server on SRX
I'm trying configure an SRX router to automatically forward all traffic through a proxy server i have in the USA.
I have created a separate vlan and configured the proxy but not sure how i can route ...