SNMP v3 and Cacti
A quick synopsis on setting up a Cisco ASA and a Centos 6 or 7 system to use SNMP v3 to be monitored by Cacti Cisco ASA en conf t # create a snmp-server group (needed for SNMP v3) # … Continue reading →
Tag Archives: SRX
Reset SRX VPN Connections
First clear phase 1 (IKE): clear security ike security-associations then clear phase 2 (IPSEC): clear security ipsec security-associations First clear phase 2 (IPSEC): clear security ipsec security-associations index INDEX-NR then clear phase 1 (IKE): clear security ike … Continue reading →
Upgrade Junos on SRX
Install Software via CLI (Method 1 – from Junos software copied to SRX) Follow these steps to copy the software to the SRX device and then perform the software installation via the CLI: Copy software to SRX via SCP or FTP to … Continue reading →
Initial Configuration of SRX
Note: When you first start you may get a bunch of messages like these on the screen Auto Image Upgrade: DHCP Client Bound interfaces: Auto Image Upgrade: DHCP Client Unbound interfaces: ge-0/0/0.0 ge-0/0/7.0 Auto Image Upgrade: To stop, on CLI … Continue reading →
Junos Logging Changes
I needed a way to track if someone logged into the switches and made changes – when they made the changes and who did it First – I set up a logging server on Linux Then I added the following … Continue reading →
Juniper SRX 300 with a DHCP server
Create a name for the pool and set the network. I named this pool CAMERAPOOL set access address-assignment pool CAMERAPOOL family inet network 10.9.5.0/24 Set the range of addresses you are going to hand out via dhcp set access address-assignment … Continue reading →
Find number of current dynamic VPN users currently connected to SRX300
show security dynamic-vpn users example: root@srx-pes> show security dynamic-vpn users User: username , Number of connections: 1 Remote IP: 2.2.2.3 IPSEC VPN: DYN-VPN IKE gateway: DYN-VPN-LOCAL-GW IKE ID : usernamePESSRX IKE Lifetime: 28800 IPSEC Lifetime: 3600 Status: CONNECTED
Continue reading →Juniper SRX DHCP Server
I am adding a new VLAN to my network and I need my SRX to hand out IP addresses for that subnet. The vlan number I am using is 19. I am calling this network PUBLICVLAN Set up the irb … Continue reading →
Configuring DNAT on Juniper SRX300
I have a web server (10.9.21.17) behind my Juniper SRX firewall. I want to make it available to the Internet. I have one static public ip address (1.1.1.116) and it is bound to the interface facing the Internet edit security … Continue reading →
Restore Juniper SRX from backup
Assuming you backup your SRX every time you make a change (see here) , you may have a need one day to restore your settings. To do so root@srx# load replace scp://username:password@IP.Of.Backup.Server/path/NameOfConfigFileToLoad.conf.gz root@srx# commit Where: username is a username … Continue reading →