First clear phase 1 (IKE): clear security ike security-associations then clear phase 2 (IPSEC): clear security ipsec security-associations First clear phase 2 (IPSEC): clear security ipsec security-associations index INDEX-NR then clear phase 1 (IKE): clear security ike … Continue reading →
Install Software via CLI (Method 1 – from Junos software copied to SRX) Follow these steps to copy the software to the SRX device and then perform the software installation via the CLI: Copy software to SRX via SCP or FTP to … Continue reading →
Note: When you first start you may get a bunch of messages like these on the screen Auto Image Upgrade: DHCP Client Bound interfaces: Auto Image Upgrade: DHCP Client Unbound interfaces: ge-0/0/0.0 ge-0/0/7.0 Auto Image Upgrade: To stop, on CLI … Continue reading →
I needed a way to track if someone logged into the switches and made changes – when they made the changes and who did it First – I set up a logging server on Linux Then I added the following … Continue reading →
Create a name for the pool and set the network. I named this pool CAMERAPOOL set access address-assignment pool CAMERAPOOL family inet network 10.9.5.0/24 Set the range of addresses you are going to hand out via dhcp set access address-assignment … Continue reading →
show security dynamic-vpn users example: root@srx-pes> show security dynamic-vpn users User: username , Number of connections: 1 Remote IP: 2.2.2.3 IPSEC VPN: DYN-VPN IKE gateway: DYN-VPN-LOCAL-GW IKE ID : usernamePESSRX IKE Lifetime: 28800 IPSEC Lifetime: 3600 Status: CONNECTED
Continue reading →I am adding a new VLAN to my network and I need my SRX to hand out IP addresses for that subnet. The vlan number I am using is 19. I am calling this network PUBLICVLAN Set up the irb … Continue reading →
I have a web server (10.9.21.17) behind my Juniper SRX firewall. I want to make it available to the Internet. I have one static public ip address (1.1.1.116) and it is bound to the interface facing the Internet edit security … Continue reading →
Assuming you backup your SRX every time you make a change (see here) , you may have a need one day to restore your settings. To do so root@srx# load replace scp://username:password@IP.Of.Backup.Server/path/NameOfConfigFileToLoad.conf.gz root@srx# commit Where: username is a username … Continue reading →
SNMP V1 and V2c set snmp location “Text String That Indicates Where This Is At” set snmp contact “usually@MyEmail.com” set snmp community MyCommunityString authorization read-only set snmp community MyCommunityString clients ip.addresses.allowed.access/24 set snmp community MyCommunityString clients moreip.addresses.allowed.access/24 SNMP V3 … Continue reading →