Routing

In the below firewall filter, swap the source and the destination address. Also apply the firewall filter on the interface ge-0/0/1 rather than ge-0/0/0 set firewall family inet filter PBF-Filter term 2 from source-address 10.239.10.11/32 set firewall ...

Hi, I put a lab for the test I want the traffic to take the greed colort >Config root@vSRX> show configuration | display set set version 21.3R1.9 set system host-name vSRX set system root-authentication encrypted-password "$6$zJw2kymY$ghxn/3jlZGMFY6xCGcSQmMUeVZ9oyKh3Kddlod.TyTS3uufl9sa10TAT67a8YlNhp7cum2.1k.B9UDSC11FJQ1" ...

Thank you for the fast response, I appreciate it so much. ------------------------------ Jorge Quinones ------------------------------

Thanks. Can you please share the output of "show route 10.232.0.132" from the SRX? It looks like the SRX has a better route to reach to 10.232.0.132/32 via 10.172.98.6 as compared with 10.172.99.14. Regards ------------------------------ Sheetanshu ...

Explaination : when the packet is initiating from ip 10.232.0.132/32 locate on vsys internet to the ip 10.172.19.15 behind the SRX via reth0.600, the return packet is going toward reth0.910 instead of reth0.600. I would like the return trafic to ...

Explaination : when the packet is initiating from ip 10.232.0.132/32 locate on vsys internet to the ip 10.172.19.15 behind the SRX via reth0.600, the return packet is going toward reth0.910 instead of reth0.600. I would like the return trafic to ...

If you just want to insure return routing on the SRX a simple method would be to enable source nat translation to the interface for the inbound flow. Then the traffic internal to the network will be routed back to the SRX interface address and match ...