SRX Next-Gen Firewalls

" I tried pinging external ip with source ip specified in the RPM and it does work. " <--- Did you mean "doesn't"? If it works, why not use that? In general, source-address should be the IP address of pp0.1, and when the connection is working ...

Hi Team, I have two PPPoE connections from ISPs, and I've static IP addresses to establish VPN connectivity. I'm trying to implement a failover mechanism using RPM with IP monitoring specifically, to monitor reachability to an external IP (e.g., ...

Persistent NAT will give you a full cone while the mapping is alive (you can adjust some timers for that). Once the mapping expires, the next session initiated from the internal host could result in a completely different mapping. Here's a really cool ...

Hi, We are trying to set up full-cone NAT on an ISP SRX5K with SPC3, specifically for STUN/P2P applications. From our documenataion, it appears that Junos supports full-cone NAT using Persistent NAT, and also through a combination ...

Hey guys. An update on this issue: First of all, the commands Nikolay recommended were useful tips, but did not give me any specific pointers towards our issue. Thanks again Nikolay for the great pointers. Secondly we did see that the issue ...

Thanks asharp. I checked with my account manager, but sometimes it is easier and quicker to ask you guys on Elevate. Thanks again. ------------------------------ Best regards Vidar Stokke ------------------------------

Off of the top of my head, RMA might be your best bet if it is still covered. I suspect the FreeBSD pros might have more helpful info, but that's all I have. Bricked kernel and administratively down usb port... I wouldn't know where to begin. I asked ...