Join Elevate
Is there a way to permanently turn on traceroute?
I assume you want the SRX to respond to trace route requests as one of the hops along a path. For that we configure at the zone level to allow trace route as a host inbound service.
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/security-edit-system-service-zone-host-inbound-traffic.html
For each zone where the desired interfaces exist you allow trace route as one of the allowed protocols.
Thank you Steve.