Guys could someone help me? I have an SRX300 with two ISPs. ISP 1 - VPN ISP 2 - Internet However when ISP2 fails ISP1 does not surf the internet. ip-monitoring ( policy INTERNET-ISP2 ( match ( rpm-probe VR-UNTRUST-ISP2; ) then ( preferred-route ( route 0.0.0.0/0 ( next...
Hello I would like to make our webserver accessible when Internet is down on ISP1. I want to create second NAT to my webserver, which is connected to FW1, from fW2 which is connected via VPN to FW1. Please see the diagram. Do you know how can I do that? I already created NAT from Untrust to...
Hello, I've been scratching my head for a week as to what is the best solution to my problem. I haven't found any other discussion on this topic which I think is pretty common: We have 2 BGP sessions with our upstreams, each announcing a default-route. If one of the ISP...
We have a SRX320 with two ISPs connected to the ge-0/0/0 and ge-0/0/2 interfaces and trusted subnets connected to the ge-0/0/5 interface. We use both ISPs for destination NATs to forward ports from the Internet to trusted subnets. To solve the problem with asymmetric NAT, for...
A2B4D7AC-8B6C-4693-A301-4BC0568B9D84-1-20181019_121359_orn-printer-01_000608-1.jpg
We have the SRX 320. Our ISP provides several external static IP addresses from the 95.78.228.208/29 subnet. ISP routes these addresses from the gateway 95.78.251.254 to the address 95.78.251.27, which also needs to be configured on our side. ISP is connected to the interface ge-0/0/0. I...