These are the steps I used to get the Juniper SRX user firewall feature working with Active Directory. The end result is I can apply firewall policies based on the username of a user or the group of a user. NOTE: JunOS 17.4R1 or above is required for this feature […]
Read moreThese are the steps I used to upgrade a Juniper vSRX cluster with minimal downtime. The Juniper vSRX cluster was running on ESXi, the upgrade was from 15.1X49-D120.3 to 17.4R1. The upgrade was done to get some new features for the user firewall (IPv6 support). The basic cluster upgrade process […]
Read moreThe following commands will show you the current TCAM usage on a QFX series switch. Especially for QFX5100 devices, the TCAM is very small and only a limited number of firewall filters can be installed. If the TCAM is full you will have issues such as the loopback firewall filter […]
Read moreMy Juniper SRX devices are configured to send packet captures to a Linux server for further analysis. I have the Linux server exporting its share via NFS which I mount on my PC, that allows me to then browse through the packet captures of attacks using my PC directly and […]
Read moreTo install the Juniper vSRX appliance on ESXi 6/6.5, the following things needed to be done. Initial Installation/VM Setup Deploy the OVA file as usual. Once the OVA has been deployed, edit the VM settings (right click the VM -> Edit Settings). Make sure you are using the Flash client […]
Read moreThere are a few common issues I have ran into when running the vSRX appliance. JunOS Console Doesn’t Show If the JunOS console does not show at all (all you see is a “Windriver Linux” screen on the console) usually the cause will be the VM’s CPU configuration. If the […]
Read moreThe following IDP rule will block SSH brute force attacks. It will be triggered by more than 3 consecutive SSH connections in a row. After the rule has been triggered, the source IP will be banned for a period of 1 hour and the connection to both the client and […]
Read moreThese steps will get RADIUS authentication working for a Dell switch. After this is configured, you will be able to login to the switch (SSH/HTTP(S)/telnet etc.) using credentials that are validated by your RADIUS server. Switch Configuration These configuration settings are all set on the switch. Generic These steps should […]
Read more