Questions tagged [srx]

SRX refers to a serie of network security producs by Juniper Networks. High-End and Low-End SRX devices use different hardware, but both run the JunOS operating system causing a consistent software interface.

30 questions
3
votes
1 answer

How to get Juniper SRX220 to respond to multiple IP Addresses

How can I get an SRX220 to respond to multiple ip addresses on same subnet, but with different gateways. e.g., Subnet: 1.1.1.40/30 (.41 gateway, .42 actual ip) Subnet: 1.1.1.44/30 (.45 gateway, .46 actual ip) both drops go into a proper switch and…
user175308
  • 133
  • 1
  • 3
2
votes
2 answers

Testing VPN from same network I want to VPN into

This is a general question. I'm building a VPN for my work network on a Juniper SRX firewall, and I need to troubleshoot it. Right now, I have to walk to a cafe or library to test it and then go back into my office to change the configuration. This…
Michael
  • 23
  • 3
1
vote
0 answers

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on communities) to only accept my peers customer…
Ben
  • 111
  • 1
1
vote
0 answers

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I have one VNET with multiple subnets (frontend,…
Matthew
  • 11
  • 2
1
vote
2 answers

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31.0 network across a VPN to corporate. Now they…
Telerias
  • 23
  • 4
1
vote
1 answer

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when there is no traffic running across the tunnel…
Rudidl
  • 11
  • 4
1
vote
1 answer

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX interface ge-0/0/2 (interface address…
user170929
  • 11
  • 1
  • 1
  • 2
0
votes
1 answer

azure forced tunneling - route all traffic back through on prem firewall

configured a site to site vpn with azure and on prem juniper srx firewall. traffic in both direction is working. configured forced tunneling to route azure vm internet traffic too through on-prem firewall. It seems that internet traffic is not…
MatB
  • 1
0
votes
0 answers

Objects in firewall filters on Juniper devices

Greetings and sorry for my English. I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual labor in case I need to reconfigure some of the…
Fmy Oen
  • 69
  • 1
  • 3
  • 6
0
votes
1 answer

SRX Juniper port forwarding

I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried: set security zones security-zone trust address-book address rCam 10.203.0.42/32 set…
lbutlr
  • 113
  • 6
0
votes
0 answers

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have configured the dns-servers and default gateway.…
0
votes
0 answers

Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up

So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS time lasts us, sometimes at night. Unfortunately…
Aaron R.
  • 467
  • 1
  • 7
  • 21
0
votes
0 answers

Can Juniper SRX300 act as VPN Client/SOHO Router?

I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to configure the other unit as the "vpn client". In other…
Ben
  • 111
  • 3
0
votes
1 answer

IPsec tunnel won't stay up

I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about 1hr. I think it's because there isn't much data…
Agrajag9
  • 180
  • 9
0
votes
2 answers

I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet

I'm new to Juniper and need some troubleshooting help. I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet (192.168.10.0/24). Can you please let me know, why they might not…
Syed
  • 1
  • 1
1
2