The upgraded range of SRX firewalls is equiped with both a DB9 port serial console and a Silicon Labs console with a mini USB port.

If a DB9-USB adapter is not availabale, grab the silicon labs drivers from following Juniper KB https://kb.juniper.net/InfoCenter/index?page=content&id=KB31671&actp=RSS

Once the driver has been installed, connect the usb-miniUSB into the SRX300 front mini usb and run screen to connect to the USB console:

$ ls -la /dev/*USB*
crw-rw-rw- 1 root wheel ...

Hey guys! I'm pretty new to this forum but I am lovin it so far. There is a ton of good info here. I wanted to share a few videos I made walking through how to set up the vSRX in GNS3 on windows. It's part of a new JNCIA video course I just released on GNS3. Enjoy!

https://www.youtube.com/watch?v=KCQ4ChzREUM

https://www.youtube.com/watch?v=u8bjP5rpyEQ

https://www.youtube.com/watch?v=KCQ4ChzREUM

Check out my youtube channel The Juniper Guy!

Thought you all might be interested in this. GNS3 has a new JNCIA-Junos course up on their academy site. The course comes with instructions on how to get a vSRX set up in GNS3 on windows and includes a vSRX image to use in the labs. There is also a free sample of the course. Here's the links.

Full Course
http://academy.gns3.com/courses/juniper ... o-to-junos


Free Sample
...

New JNCIA-Junos course has fully functional virtualized labs with vSRX in GNS3 network emulator. Check it out!

http://academy.gns3.com/courses/juniper ... o-to-junos

Hi
I'm new in Juniper,
we have SRX 210HE2 with all Subscription such WF/AV/IDP/AppSec enable/active.
YM communication is running well but Juniper block the conversation history.
does anybody know, why is Juniper SRX block the link of the Conversation History in YM.
how can I unblock that link ?

I hope u understand what I mean.

Thanks

Hi Guys,

I trying to configure my first juniper srx firewall and from last week I'm stuck on one problem. I can't access the internet from my management lan... I think that I'm missing something, I can ping everything from the srx but nothing from the management lan...









My configuration:


## Last changed: 2015-04-06 22:09:53 BST
version 12.1X44-D35.5;
system {
host-name srx;
time-zone Europe/London;
root-authentication {
encrypted-password "******************************"; ## SECRET-DATA
}
name-server {
208.67.222.222; ...

Juniper SRX is a stateful firewall, it keeps a memory table of all traffic sessions passing through and that have been allowed by security policies.

To dump session table, use "show security flow session" operational command with filters to get information only about specific type of traffic, i.e.: only ipv4 or only ipv6 traffic, only tcp or udp or going in/out one interface:











> show security flow ?
Possible completions:
gate Show gate information
ip-action ...

vSRX cluster - Introduction

FireFly Perimeter, or vSRX, is the virtualized version of Juniper SRX branch firewalls. The first version released by Juniper was based on Junos 12.1X46 with limited feature support. At the time of this writing, FireFly evaluation version is based on 12.1X47-D10.

Some of the features supported by Juniper vSRX in X47 are: ALGs, IPSEC, MPLS, BGP, OSPF, ISIS, IDP, AppFW and others. LACP in chassis cluster is not yet supported.
For ...

A Juniper SRX firewall adopts a different behavior when cluster enabled and rebooted.
Depending on the model, it will change the role of specific fe-/ge- interfaces to behave as cluster management and as cluster control link, a 3rd interface will be (upon configuration) a member of fabric interface for data plane inter-communication between the two cluster nodes.

root@SRX-node> set chassis cluster cluster-id ?
Possible completions:
<cluster-id> Cluster identifier (0..15)
node Node identifier (0..1)
reboot Reboot ...

Some SRX firewalls need to be deployed in insecure environments, thus forcing administrators to protect the console from being accessed by non-root users. This complicates things when root password is lost and no way to login to the box to overwrite it.

Trying to recover a lost root password in SRX when the console is protected against non-root access:

(press space at the second prompt “Hit to boot immediately, or space bar for command ...