Questions tagged [srx]

SRX refers to a serie of network security producs by Juniper Networks. High-End and Low-End SRX devices use different hardware, but both run the JunOS operating system causing a consistent software interface.

Filter by
Sorted by
Tagged with
1 vote
1 answer
2k views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0 votes
1 answer
897 views

azure forced tunneling - route all traffic back through on prem firewall

configured a site to site vpn with azure and on prem juniper srx firewall. traffic in both direction is working. configured forced tunneling to route azure vm internet traffic too through on-prem ...
0 votes
0 answers
269 views

Objects in firewall filters on Juniper devices

Greetings and sorry for my English. I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual ...
1 vote
0 answers
405 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
0 votes
1 answer
232 views

SRX Juniper port forwarding

I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried: set security zones security-zone trust ...
0 votes
0 answers
310 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
1 vote
0 answers
305 views

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I ...
0 votes
0 answers
649 views

Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up

So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
0 votes
0 answers
752 views

Can Juniper SRX300 act as VPN Client/SOHO Router?

I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
0 votes
2 answers
658 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
1 vote
1 answer
25k views

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX ...
0 votes
1 answer
2k views

IPsec tunnel won't stay up

I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about ...
1 vote
2 answers
332 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
0 votes
2 answers
1k views

I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet

I'm new to Juniper and need some troubleshooting help. I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet (192.168.10.0/24)....
2 votes
2 answers
403 views

Testing VPN from same network I want to VPN into

This is a general question. I'm building a VPN for my work network on a Juniper SRX firewall, and I need to troubleshoot it. Right now, I have to walk to a cafe or library to test it and then go ...
0 votes
1 answer
6k views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
0 votes
1 answer
3k views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
0 votes
0 answers
60 views

How to connect internal IPv6 to IPv4 network

For the past few days Im having "fun" checking different NAT configuration options on srx240. Im looking for a way to enable lab PC connection to internet. Is it possible with this spec, or do I have ...
0 votes
0 answers
1k views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0 votes
0 answers
2k views

Wierd traceroute / ICMP issues on Juniper SRX 210BE

I recently acquired Juniper SRX 210BE; until now I've been using Cisco ASA 5505 but I really want to switch over to Juniper world (big FreeBSD fan and all that). I've got FTTC (fiber to the cabnet) ...
0 votes
0 answers
1k views

Need advice on Juniper OSPF networking

I have been thrown in to this project because of a coworker's termination. I have a set of Juniper SRX 550 Routers. I need to create an OSPF network that passes all traffic (All subnets) as if it ...
0 votes
1 answer
2k views

Juniper with multiple DHCP pool connected to Cisco switch

Newbie question: In our law office we have the following setup: Juniper SRX connected to Cisco L3 switch via trunk port. Cisco switch has: VLAN 5 range: 10.4.0.10 - 250 /24 VLAN 6 range: 10.5.0....
0 votes
1 answer
203 views

cannot access srx220 router from browser

I can't access my SRX220 juniper router from any browser. It hangs for a long time and shows a message like No data Received. I can access it through cli prompt and can see the logs. All web ...
-3 votes
2 answers
3k views

Access to vCenter Server (in private network) from the Internet through vSphere Client [closed]

I have a vCenter server as a VM on my DPER710 in my internal network. DPE is connected to switch, switch is connected to JSRX, JSRX is connected to my ISP. My vCenter Server is installed on Windows ...
3 votes
1 answer
5k views

How to get Juniper SRX220 to respond to multiple IP Addresses

How can I get an SRX220 to respond to multiple ip addresses on same subnet, but with different gateways. e.g., Subnet: 1.1.1.40/30 (.41 gateway, .42 actual ip) Subnet: 1.1.1.44/30 (.45 gateway, .46 ...
0 votes
2 answers
297 views

Is there a Juniper limitation on the number of SA in 'any to any' ACL in IKEv1

I've connected Juniper SRX5800 and another enodeB device (don't know the vendor) by an IPSec tunnel. It uses IKEv1 for negotiation of keys. there are 10 ACLs on the enodeB side and on Juniper SRX, I ...
0 votes
1 answer
1k views

Packetloss in Juniper SRX with gigether-options loopback enabled

I have run into an interesting problem with a Juniper SRX 240 box. The box is running BGP as a border router, and is announcing a /24. To ensure that the vlan with the network stayed "up" I set the ...
0 votes
1 answer
5k views

How to route all network traffic for vlan through a proxy server on SRX

I'm trying configure an SRX router to automatically forward all traffic through a proxy server i have in the USA. I have created a separate vlan and configured the proxy but not sure how i can route ...