First clear phase 1 (IKE): clear security ike security-associations then clear phase 2 (IPSEC): clear security ipsec security-associations First clear phase 2 (IPSEC): clear security ipsec security-associations index INDEX-NR then clear phase 1 (IKE): clear security ike … Continue reading →
Install Software via CLI (Method 1 – from Junos software copied to SRX) Follow these steps to copy the software to the SRX device and then perform the software installation via the CLI: Copy software to SRX via SCP or FTP to … Continue reading →
Note: When you first start you may get a bunch of messages like these on the screen Auto Image Upgrade: DHCP Client Bound interfaces: Auto Image Upgrade: DHCP Client Unbound interfaces: ge-0/0/0.0 ge-0/0/7.0 Auto Image Upgrade: To stop, on CLI … Continue reading →
I needed a way to track if someone logged into the switches and made changes – when they made the changes and who did it First – I set up a logging server on Linux Then I added the following … Continue reading →
Create a name for the pool and set the network. I named this pool CAMERAPOOL set access address-assignment pool CAMERAPOOL family inet network 10.9.5.0/24 Set the range of addresses you are going to hand out via dhcp set access address-assignment … Continue reading →
To recover the root password: Power off the SRX by pressing the power button on the front panel. Turn off the power to the management device, such as a PC or laptop computer, that you want to use to access … Continue reading →
show security dynamic-vpn users example: root@srx-pes> show security dynamic-vpn users User: username , Number of connections: 1 Remote IP: 2.2.2.3 IPSEC VPN: DYN-VPN IKE gateway: DYN-VPN-LOCAL-GW IKE ID : usernamePESSRX IKE Lifetime: 28800 IPSEC Lifetime: 3600 Status: CONNECTED
Continue reading →I am adding a new VLAN to my network and I need my SRX to hand out IP addresses for that subnet. The vlan number I am using is 19. I am calling this network PUBLICVLAN Set up the irb … Continue reading →
This appears on the console when booting a Juniper device: WARNING: JUNOS versions running on dual partitions are not same This will happen on an upgrade of JunOS. To resolve this issue, make sure you are currently booted on the … Continue reading →
I have a web server (10.9.21.17) behind my Juniper SRX firewall. I want to make it available to the Internet. I have one static public ip address (1.1.1.116) and it is bound to the interface facing the Internet edit security … Continue reading →