Message Image

Skip main navigation (Press Enter).

SRX

View Only

last person joined: 2 days ago

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

Back to discussions

Expand all | Collapse all

Web server not working

Jump to Best Answer

GEORGI DONKOV09-25-2023 10:08

Hello, I am trying to setup a webserver. I need this: 46.10.161.40 -> 192.168.2.2 on port 80 ...

bkamen09-25-2023 11:38

Hey Georgi, After setting up Destination NAT, You also need a security policy rule that allows the ...

GEORGI DONKOV09-25-2023 12:59

Hello. Thank you for answering! Here is my configuration for the security policy: Where destination ...

bkamen09-25-2023 13:43

Ok - so Your original dNAT needs correction. Your dest port for rule "r1" should be 83 and then ...

GEORGI DONKOV09-26-2023 03:04

Thank you for answering! So here is my configuration so far: destination { pool port-83 { ...

Brijil09-26-2023 03:23

Hello Georgi, Did we confirm if the traffic is reaching the SRX in first place? Please see ...

GEORGI DONKOV09-26-2023 04:03

Hello, Brijil. The command > show security flow session destination-prefix 46.10.161.40 destination-port ...

Brijil09-26-2023 04:29

Can you get me the traces please ? lets have a look in that as well. ------------------------------ ...

GEORGI DONKOV09-26-2023 05:28

Hello, Brijil. Here you are the traces. Thank you in advance! ------------------------------ ...

Brijil09-26-2023 06:34

Looks like the device is not identifying the Dnat and hence its dropping packet. Sep 26 12:24:31 ...

GEORGI DONKOV09-26-2023 06:46

Sorry, I am not sure what you mean. But right now I checked the logs again and found some other ...

Brijil09-26-2023 07:07

I checked the new logs too and it seems the same for me. Can you specify what you saw different ...

GEORGI DONKOV09-26-2023 10:15

from -zone untrust to -zone trust { policy server -access { match ...

bkamen09-26-2023 03:40

Close -- but try this and let us know. from-zone untrust to-zone trust { policy server-access ...

GEORGI DONKOV09-26-2023 04:01

Hello, Ben! I updated the security policy, just left the dynamic-application: any, because it said ...

bkamen09-26-2023 15:22Best Answer

Yea - i don't know why you kept the "dynamic-applications any;" If you note from the config snippet ...

1. Web server not working

0 Recommend

GEORGI DONKOV

Posted 09-25-2023 10:08

Reply Reply Privately