Junos Logging Changes
I needed a way to track if someone logged into the switches and made changes – when they made the changes and who did it First – I set up a logging server on Linux Then I added the following … Continue reading →
Tag Archives: SRX
Juniper SRX 300 with a DHCP server
First – add the following line: set system services dhcp-local-server requested-ip-interface-match Create a name for the pool and set the network. I named this pool CAMERAPOOL set access address-assignment pool CAMERAPOOL family inet network 10.9.5.0/24 Set the range of addresses … Continue reading →
Upgrade Junos on SRX
Install Software via CLI (Method 1 – from Junos software copied to SRX) Follow these steps to copy the software to the SRX device and then perform the software installation via the CLI: Copy software to SRX via SCP or FTP to … Continue reading →
Initial Configuration of SRX
Note: When you first start you may get a bunch of messages like these on the screen Auto Image Upgrade: DHCP Client Bound interfaces: Auto Image Upgrade: DHCP Client Unbound interfaces: ge-0/0/0.0 ge-0/0/7.0 Auto Image Upgrade: To stop, on CLI … Continue reading →
Find number of current dynamic VPN users currently connected to SRX300
show security dynamic-vpn users example: root@srx-pes> show security dynamic-vpn users User: username , Number of connections: 1 Remote IP: 2.2.2.3 IPSEC VPN: DYN-VPN IKE gateway: DYN-VPN-LOCAL-GW IKE ID : usernamePESSRX IKE Lifetime: 28800 IPSEC Lifetime: 3600 Status: CONNECTED
Continue reading →Juniper SRX DHCP Server
I am adding a new VLAN to my network and I need my SRX to hand out IP addresses for that subnet. The vlan number I am using is 19. I am calling this network PUBLICVLAN Set up the irb … Continue reading →
Restore Juniper SRX from backup
Assuming you backup your SRX every time you make a change (see here) , you may have a need one day to restore your settings. To do so root@srx# load replace scp://username:password@IP.Of.Backup.Server/path/NameOfConfigFileToLoad.conf.gz root@srx# commit Where: username is a username … Continue reading →
Juniper SNMP Settings
SNMP V1 and V2c set snmp location “Text String That Indicates Where This Is At” set snmp contact “usually@MyEmail.com” set snmp community MyCommunityString authorization read-only set snmp community MyCommunityString clients ip.addresses.allowed.access/24 set snmp community MyCommunityString clients moreip.addresses.allowed.access/24 SNMP V3 set … Continue reading →
SRX Dual ISP Failover
I have a simple situation – I have two ISP’s. The gateway of my primary (i.e. providing the fastest service) is 9.9.9.9. The gateway of my secondary isp is 8.8.8.8 # My default route via my primary ISP set routing-options … Continue reading →
Configuring DNAT on Juniper SRX300
I have a web server (10.9.21.17) behind my Juniper SRX firewall. I want to make it available to the Internet. I have one static public ip address (1.1.1.116) and it is bound to the interface facing the Internet edit security … Continue reading →