Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [srx]

SRX refers to a serie of network security producs by Juniper Networks. High-End and Low-End SRX devices use different hardware, but both run the JunOS operating system causing a consistent software interface.

1
vote
0answers
21 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
0
votes
1answer
31 views

SRX Juniper port forwarding

I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried: set security zones security-zone trust ...
0
votes
0answers
36 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
0
votes
0answers
29 views

Integrating ClearPass with Juniper Networks SRX

I am trying to get data through ClearPass to SRX, the SRX refuse any data that contains special character like for example {@}. It gives an error in the managert.txt {EntityRef: expecting ';'} Any ...
0
votes
0answers
32 views

Is it possible to have firewall rules trigger before destination NAT with Juniper SRX

I'm trying to have a printer that is in production net be available from quest network by doing destination nat on virtual interface of a port in the firewall. However, because destination nat happens ...
1
vote
0answers
121 views

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I ...
0
votes
0answers
57 views

Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up

So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
0
votes
0answers
372 views

Can Juniper SRX300 act as VPN Client/SOHO Router?

I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
0
votes
1answer
738 views

IPsec tunnel won't stay up

I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about ...
0
votes
2answers
244 views

I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet

I'm new to Juniper and need some troubleshooting help. I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet (192.168.10.0/24)....
2
votes
2answers
145 views

Testing VPN from same network I want to VPN into

This is a general question. I'm building a VPN for my work network on a Juniper SRX firewall, and I need to troubleshoot it. Right now, I have to walk to a cafe or library to test it and then go ...
0
votes
0answers
118 views

Multiple vlans assigned to multiple ports, spanning tree blocks new connections to firewall

I have a Cisco SG300 switch, which is connected to a Juniper SRX220 firewall. Currently, all SG300 ports are in one untagged vlan (vlan id 1). Only one port on the SRX firewall is connected to the ...
1
vote
2answers
85 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
0
votes
1answer
2k views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
0
votes
1answer
791 views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
0
votes
0answers
44 views

How to connect internal IPv6 to IPv4 network

For the past few days Im having "fun" checking different NAT configuration options on srx240. Im looking for a way to enable lab PC connection to internet. Is it possible with this spec, or do I have ...
0
votes
2answers
405 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
0
votes
0answers
802 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
1
vote
1answer
1k views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
0answers
1k views

Wierd traceroute / ICMP issues on Juniper SRX 210BE

I recently acquired Juniper SRX 210BE; until now I've been using Cisco ASA 5505 but I really want to switch over to Juniper world (big FreeBSD fan and all that). I've got FTTC (fiber to the cabnet) ...
0
votes
0answers
879 views

Need advice on Juniper OSPF networking

I have been thrown in to this project because of a coworker's termination. I have a set of Juniper SRX 550 Routers. I need to create an OSPF network that passes all traffic (All subnets) as if it ...
0
votes
1answer
1k views

Juniper with multiple DHCP pool connected to Cisco switch

Newbie question: In our law office we have the following setup: Juniper SRX connected to Cisco L3 switch via trunk port. Cisco switch has: VLAN 5 range: 10.4.0.10 - 250 /24 VLAN 6 range: 10.5.0....
0
votes
1answer
172 views

cannot access srx220 router from browser

I can't access my SRX220 juniper router from any browser. It hangs for a long time and shows a message like No data Received. I can access it through cli prompt and can see the logs. All web ...
-3
votes
2answers
2k views

Access to vCenter Server (in private network) from the Internet through vSphere Client [closed]

I have a vCenter server as a VM on my DPER710 in my internal network. DPE is connected to switch, switch is connected to JSRX, JSRX is connected to my ISP. My vCenter Server is installed on Windows ...
2
votes
1answer
4k views

How to get Juniper SRX220 to respond to multiple IP Addresses

How can I get an SRX220 to respond to multiple ip addresses on same subnet, but with different gateways. e.g., Subnet: 1.1.1.40/30 (.41 gateway, .42 actual ip) Subnet: 1.1.1.44/30 (.45 gateway, .46 ...
1
vote
1answer
19k views

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX ...
0
votes
2answers
266 views

Is there a Juniper limitation on the number of SA in 'any to any' ACL in IKEv1

I've connected Juniper SRX5800 and another enodeB device (don't know the vendor) by an IPSec tunnel. It uses IKEv1 for negotiation of keys. there are 10 ACLs on the enodeB side and on Juniper SRX, I ...
0
votes
1answer
4k views

How to route all network traffic for vlan through a proxy server on SRX

I'm trying configure an SRX router to automatically forward all traffic through a proxy server i have in the USA. I have created a separate vlan and configured the proxy but not sure how i can route ...
0
votes
1answer
1k views

Packetloss in Juniper SRX with gigether-options loopback enabled

I have run into an interesting problem with a Juniper SRX 240 box. The box is running BGP as a border router, and is announcing a /24. To ensure that the vlan with the network stayed "up" I set the ...