SRX

 View Only
last person joined: 13 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX320 DHCP issue with Smartphones

    Posted 10-24-2019 06:42
      |   view attached

    Hi

    I hope can someone help here as usual. 

    I have a Juniper SRX 320 which is working fine with 2 DHCP server pools. I am getting IP on my laptops and also connected devices except the smartphones that we have at home. Please see the attached configuration and any prompt help is really appreciated.

    Attachment(s)

    txt
    SRX.txt   8 KB 1 version


  • 2.  RE: SRX320 DHCP issue with Smartphones

    Posted 10-24-2019 07:13

    For a start I would highly recommend you to upgrade Junos to the recommended JTAC release. There were quite some bugs in the 15.1X49-D70 Junos version.

     

    Secondly you have configured dhcp both the old and new way and only partly configured the new way.

     

    Suggestions to your configuration:

     

    1. Please remove anything below "system services dhcp" and "access address-assignment".

    2. Add the following config lines and commit.

    3. Validate and revert with the result here.

     

    set system services dhcp-local-server group int interface irb.8
    set system services dhcp-local-server group int interface irb.9
    
    
    set access address-assignment pool int family inet network 192.168.8.0/24
    set access address-assignment pool int family inet range scope low 192.168.8.30
    set access address-assignment pool int family inet range scope high 192.168.8.99
    set access address-assignment pool int family inet dhcp-attributes grace-period 86400
    set access address-assignment pool int family inet dhcp-attributes name-server 207.164.234.193
    set access address-assignment pool int family inet dhcp-attributes name-server 198.235.214.4
    set access address-assignment pool int family inet dhcp-attributes router 192.168.8.1
    set access address-assignment pool int family inet network 192.168.9.0/24
    set access address-assignment pool int family inet range scope low 192.168.9.30
    set access address-assignment pool int family inet range scope high 192.168.9.99
    set access address-assignment pool int family inet dhcp-attributes grace-period 86400
    set access address-assignment pool int family inet dhcp-attributes name-server 207.164.234.193	
    set access address-assignment pool int family inet dhcp-attributes name-server 198.235.214.4
    set access address-assignment pool int family inet dhcp-attributes router 192.168.9.1
    

    I hope this helps - and remember to upgrade your SRX 🙂

     



  • 3.  RE: SRX320 DHCP issue with Smartphones

    Posted 10-24-2019 07:40
      |   view attached

    I had to mention that VLAN 8 and 9 are going to different SSIDs. Now, I cannot connect on any devices to Wifi on VLAN 8 however I can connect my laptops to wifi on VLAN 9. I am still experiencing the same iphone connectivity issue on VLAN 9 and ofcourse VLAN 8.

    I changed the config as per your suggestion. please see the attachment. 

     

    Thanks. 

    Attachment(s)

    txt
    SRX-v2.txt   8 KB 1 version


  • 4.  RE: SRX320 DHCP issue with Smartphones
    Best Answer

    Posted 10-24-2019 08:32

    Sorry, I managed to clone the configuration wrongly - so the 192.168.8.0/24 was overwritten. Please try this instead:

     

    (and I will still recommend you to upgrade the Junos on your SRX320)

     

    delete access address-assignment
    set access address-assignment pool irb-9 family inet network 192.168.9.0/24
    set access address-assignment pool irb-9 family inet range scope low 192.168.9.30
    set access address-assignment pool irb-9 family inet range scope high 192.168.9.99
    set access address-assignment pool irb-9 family inet dhcp-attributes grace-period 86400
    set access address-assignment pool irb-9 family inet dhcp-attributes name-server 198.235.214.4
    set access address-assignment pool irb-9 family inet dhcp-attributes name-server 207.164.234.193
    set access address-assignment pool irb-9 family inet dhcp-attributes router 192.168.9.1
    set access address-assignment pool irb-8 family inet network 192.168.8.0/24
    set access address-assignment pool irb-8 family inet range scope low 192.168.8.30
    set access address-assignment pool irb-8 family inet range scope high 192.168.8.99
    set access address-assignment pool irb-8 family inet dhcp-attributes grace-period 86400
    set access address-assignment pool irb-8 family inet dhcp-attributes name-server 207.164.234.193
    set access address-assignment pool irb-8 family inet dhcp-attributes name-server 198.235.214.4
    set access address-assignment pool irb-8 family inet dhcp-attributes router 192.168.8.1
    


  • 5.  RE: SRX320 DHCP issue with Smartphones

    Posted 10-24-2019 10:21
      |   view attached

    Your configuration resolved the DHCP issue and everything was working fine (internet access and DHCP). Then I decided to follow your recommendation and upgrade the JUNOS to JTAC recommended release.

    The upgrade went well however, I lost internet access. I checked ppp0 interface and it was UP/Down. What could be wrong as the SRX was connected to internet before the JUNOS upgrade? I did not touch my PPPOE cridentials.

    Please have a look at the attached latest configuration.

    Attachment(s)

    txt
    srx-v3.txt   9 KB 1 version


  • 6.  RE: SRX320 DHCP issue with Smartphones

    Posted 10-24-2019 11:24

    I'm glad that the DHCP part is now working as expected 🙂

     

    I must admit that I'm of very little help regarding PPPoE as I have never needed anykind of dialer/ppp configuration. Everything I have been managing has been DHCP assigned or static.

     

    For other to be able to help, please share 'show interfaces pp0', 'show pppoe statistics' and 'show ppp statistics' - maybe you are able to pin point the issue yourself by looking at the output?

     

    Otherwise try to enable pppoe debug and look at the logs: https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/pppoe-traceoptions.html

     

    If no obvious error is seen, you could downgrade back to the 15.1X49 software train, but then use the release which was previously JTAC recommended: 15.1X49-D170.

     

    But - as 15.1X49 are going end of Engineering support in a very few months, this is only an intermediate step to reestablish internet access until the issue is solved.