Networking, system administration and more
Networking, system administration and more
The Juniper vSRX uses nested virtualization to run. The host OS is Wind River Linux, assuming you are running this on ESXi you can see the host OS if you push Alt + F2 to access a separate terminal. For troubleshooting or if you are interested in further information about […]
Read moreNOTE: I originally published this page in 2018; instructions may now be out of date. Recent releases of the Juniper vMX (18.1 onwards) support dual routing engines when using KVM as the virtualisation technology. One or both of the routing engines do not need to be configured on the same […]
Read moreRecently Juniper has released version 18.2R1 of the vSRX appliance. When I have tried to deploy the OVA file on an ESXi 6.7 host the deployment failed. The first indication of an issue is on step 5 of creating a new virtual machine, the deployment type shows as “undefined – […]
Read moreIn my network, a Juniper SRX cluster handles all DHCP leases (via an IP helper configured on the switches with DHCP snooping). These are the steps I used to get the DHCP server for SRX devices to work for Windows Deployment Services. Main DHCP Configuration The following configuration is set […]
Read moreQuite often people scan for WordPress installs by checking to see if a HTTP request can be made to /xmlrpc.php. Since I do not run WordPress at all it is low hanging fruit to block the source IP that makes a HTTP request for that to my web servers. The […]
Read moreSometimes you need to execute commands on the secondary node. To do this you can open a session to the remote node from the primary using the command request routing-engine login node X where X is the node ID to login to. As an example: Transferring Files Files can also […]
Read moreThese are the steps I used to get the Juniper SRX user firewall feature working with Active Directory. The end result is I can apply firewall policies based on the username of a user or the group of a user. NOTE: JunOS 17.4R1 or above is required for this feature […]
Read moreThese are the steps I used to upgrade a Juniper vSRX cluster with minimal downtime. The Juniper vSRX cluster was running on ESXi, the upgrade was from 15.1X49-D120.3 to 17.4R1. The upgrade was done to get some new features for the user firewall (IPv6 support). The basic cluster upgrade process […]
Read moreMy Juniper SRX devices are configured to send packet captures to a Linux server for further analysis. I have the Linux server exporting its share via NFS which I mount on my PC, that allows me to then browse through the packet captures of attacks using my PC directly and […]
Read moreTo install the Juniper vSRX appliance on ESXi 6/6.5, the following things needed to be done. Initial Installation/VM Setup Deploy the OVA file as usual. Once the OVA has been deployed, edit the VM settings (right click the VM -> Edit Settings). Make sure you are using the Flash client […]
Read more