Lets say I have the following security policies set security policies from-zone CAMERAS to-zone INTERNET policy CAMERAS-to-INTERNET match source-address any set security policies from-zone CAMERAS to-zone INTERNET policy CAMERAS-to-INTERNET match destination-address any set security policies from-zone CAMERAS to-zone INTERNET policy … Continue reading →
1) Reboot the box and press SPACE when you see the following screen to get to the loader prompt. writing to flash… Protected 1 sectors Loading /boot/defaults/loader.conf /kernel data=0x9f5c18+0xd8d68 syms=[0x4+0x7e350+0x4+0xb49c7] Hit [Enter] to boot immediately, or space bar for … Continue reading →
jnxOperatingTemp.9.1.0.0 or 1.3.6.1.4.1.2636.3.1.13.1.7.9.1.0.0 Settings for Nagios to monitor temperature on SRX using snmp v3 /usr/lib64/nagios/plugins/check_snmp -H 10.254.253.1 -o 1.3.6.1.4.1.2636.3.1.13.1.7.9.1.0.0 -w 43 -c 45 -u C -P 3 -L authPriv -U SNMPUSERNAME -a MD5 -A AUTHPASS -x aes -X PRIVPASS SNMP … Continue reading →
If you are using J-Web on an SRX and want to select what the URL is to access J-Web use the following: system services web-management management-url booga The URL for J-Web will now be https://your.srx.fqdn.name/booga Tested on SRX300 running … Continue reading →
First – set up logging set system processes general-authentication-service traceoptions file general_auth set system processes general-authentication-service traceoptions file size 100000 set system processes general-authentication-service traceoptions file files 10 set system processes general-authentication-service traceoptions flag all Review the logs > show … Continue reading →
If you are running the UniFi Network application on a server that is on the same network segment with your Ubiqiti devices, all is good, but, if the devices are on a separate network segment (i.e. there is a router … Continue reading →
If you are using the DHCP server on an SRX (and this should apply to other Juniper products running Junos) you can set up time options for DHCP clients on your network Option 42 Option 42 NTP server – tell … Continue reading →
First clear phase 1 (IKE): clear security ike security-associations then clear phase 2 (IPSEC): clear security ipsec security-associations First clear phase 2 (IPSEC): clear security ipsec security-associations index INDEX-NR then clear phase 1 (IKE): clear security ike … Continue reading →
I needed a way to track if someone logged into the switches and made changes – when they made the changes and who did it First – I set up a logging server on Linux Then I added the following … Continue reading →
First – add the following line: set system services dhcp-local-server requested-ip-interface-match Create a name for the pool and set the network. I named this pool CAMERAPOOL set access address-assignment pool CAMERAPOOL family inet network 10.9.5.0/24 Set the range of addresses … Continue reading →