Ask the Expert

  • 1.  Firwall srx /delete security zones

    Posted 04-05-2021 20:25
    hello  sir ,
     kindly, I am trying to delete unused APN, everything look ok for the work order, but each time I receive this error (( referenced address must be defined under address-book )) ,,, the work order is just two statement..

    SRX5400-1
    =================
    delete security nat source rule-set PAT1 rule 3 match source-address 10.211.0.0/18
    delete security zones security-zone Trust address-book address 3G_src_addr20 10.211.0.0/18  this line is not deleted 


    saif.salah

    ------------------------------
    saif salah
    ------------------------------


  • 2.  RE: Firwall srx /delete security zones

    Posted 04-08-2021 19:55
    This message is telling you the address object you are trying to delete: 3G_src_addr20
    Is being used by a policy somewhere.  So before the object can be deleted the policy must also be removed.

    If you use this command you can find the location of the policy to remove.
    show security policy | display set | match 3G_src_addr20

    From here the delete the policies that are found.


    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------