Article IDKB89649 Created2024-10-23 Last Updated2024-10-23 Description This article provides steps on how to migrate or copy local certificates from one SRX device to another SRX device. Solution Please follow the below steps to copy existing local-certificates from one … Continue reading →
Create a firewall filter to log and accept any packets that match the server’s IP address as the destination-address. set firewall filter SYSLOG_FILTER term SYSLOG_PACKETS from destination-address 192.0.2.5/32 set firewall filter SYSLOG_FILTER term SYSLOG_PACKETS from destination-port 514 set firewall … Continue reading →
Lets say I have the following security policies set security policies from-zone CAMERAS to-zone INTERNET policy CAMERAS-to-INTERNET match source-address any set security policies from-zone CAMERAS to-zone INTERNET policy CAMERAS-to-INTERNET match destination-address any set security policies from-zone CAMERAS to-zone INTERNET policy … Continue reading →
1) Reboot the box and press SPACE when you see the following screen to get to the loader prompt. writing to flash… Protected 1 sectors Loading /boot/defaults/loader.conf /kernel data=0x9f5c18+0xd8d68 syms=[0x4+0x7e350+0x4+0xb49c7] Hit [Enter] to boot immediately, or space bar for … Continue reading →
jnxOperatingTemp.9.1.0.0 or 1.3.6.1.4.1.2636.3.1.13.1.7.9.1.0.0 Settings for Nagios to monitor temperature on SRX using snmp v3 /usr/lib64/nagios/plugins/check_snmp -H 10.254.253.1 -o 1.3.6.1.4.1.2636.3.1.13.1.7.9.1.0.0 -w 43 -c 45 -u C -P 3 -L authPriv -U SNMPUSERNAME -a MD5 -A AUTHPASS -x aes -X PRIVPASS SNMP … Continue reading →
If you are using J-Web on an SRX and want to select what the URL is to access J-Web use the following: system services web-management management-url booga The URL for J-Web will now be https://your.srx.fqdn.name/booga Tested on SRX300 running … Continue reading →
First – set up logging set system processes general-authentication-service traceoptions file general_auth set system processes general-authentication-service traceoptions file size 100000 set system processes general-authentication-service traceoptions file files 10 set system processes general-authentication-service traceoptions flag all Review the logs > show … Continue reading →
If you are running the UniFi Network application on a server that is on the same network segment with your Ubiqiti devices, all is good, but, if the devices are on a separate network segment (i.e. there is a router … Continue reading →
If you are using the DHCP server on an SRX (and this should apply to other Juniper products running Junos) you can set up time options for DHCP clients on your network Option 42 Option 42 NTP server – tell … Continue reading →
First clear phase 1 (IKE): clear security ike security-associations then clear phase 2 (IPSEC): clear security ipsec security-associations First clear phase 2 (IPSEC): clear security ipsec security-associations index INDEX-NR then clear phase 1 (IKE): clear security ike … Continue reading →