Re: Translated Source Address Using Default Gateway Not Alternate Public IP
Hi, It would be failing in assymetric routing, you can check in the debug flow basic. You can try "set flow reverse-route clear-text prefer" as in the KB...
View ArticleRe: Translated Source Address Using Default Gateway Not Alternate Public IP
You will need to remove the MIP for this address. They get processed first and cannot be used with source nat as you have seen. Instead check that box fo destination nat and enter the server address...
View ArticleRe: Translated Source Address Using Default Gateway Not Alternate Public IP
Spuluka, I have removed the MIP for that IP as recommended and setup new policies but for some reason I am getting the same results. Incoming is working perfectly with the 'destination' updated in...
View ArticleRe: Translated Source Address Using Default Gateway Not Alternate Public IP
Sorry, I missed that you also needed to initiate traffic outbound from the server. The setup so far only takes care of inbound traffic to the server. For the outbound traffic it uses the other...
View ArticleRe: Translated Source Address Using Default Gateway Not Alternate Public IP
I set it up using the details below and the route is getting translated now but no data is being received. You will see that Byte Received is 0. I setup an Untrust to Trust policy but nothing is...
View ArticleMultiple Ethernet adapters (mac addresses) and one reserved ip address
Hello!Cannot find anything on the subject: how to configure an ip reservation for a machine with multiple Ethernet cards on Juniper SSG5? For example a server with 2 Ethernet cards wit separate mac...
View ArticleRe: Translated Source Address Using Default Gateway Not Alternate Public IP
I believe you want this on eth4 not eth1 based on your previous notes: *212.24.24.45/32 ethernet1S20
View ArticleRe: Multiple Ethernet adapters (mac addresses) and one reserved ip address
If you can assign a static address to the host, look up nic teaming for the operating system running on the host. This allows the two cards to be treated as a single nic by the operating system and...
View ArticleRe: Multiple Ethernet adapters (mac addresses) and one reserved ip address
But this still does not solve the problem of static ip on the device. I suppose when the card with the static ip dies, the other one will get a new ip from the dhcp pool and the server will become...
View ArticleRe: Multiple Ethernet adapters (mac addresses) and one reserved ip address
Sorry for not being clear. With nic teaming the single ip address is assigned to the team by the OS NOT a specific card.the two nic are treated by the OS as if they are a single connection.this is the...
View ArticleRe: Multiple Ethernet adapters (mac addresses) and one reserved ip address
Thank you. But you are still referring to the "other" side, so the OS side.I wanted to have it set up on the dhcp side, so the other "end" of the cable.
View ArticleCannot access Juniper SSG5 through https
Hi,As mentioned in the topic, I cannot access the device through https. SSL is on, connection over http works without problems as long as I do not activate the "redirect to https" option. What else...
View ArticleRe: Cannot access Juniper SSG5 through https
Hi, Could be hitting the following condition, could you check:https://kb.juniper.net/InfoCenter/index?page=content&id=KB30330
View ArticleRe: Multiple Ethernet adapters (mac addresses) and one reserved ip address
Please check if https://kb.juniper.net/InfoCenter/index?page=content&id=KB28287 helps.Thanks,Vikas
View ArticleRe: Multiple Ethernet adapters (mac addresses) and one reserved ip address
Normaly you do a NIC teaming on the OS side. This gives you a virtual NIC with a new (virtual) MAC-address, which you can reserve on the DHCP-Server.
View ArticleRe: Translated Source Address Using Default Gateway Not Alternate Public IP
I actually tried that first but then looked at your example link and thought there was some relationship between the source routing and the source interface based routing so I matched the flow with the...
View ArticleRe: Cannot access Juniper SSG5 through https
Well, my case concerns all possible browsers, not only Firefox...
View ArticleRe: Cannot access Juniper SSG5 through https
Do you have SSL enabled on the interface you are trying to manage?
View ArticleRe: Cannot access Juniper SSG5 through https
Please check KB https://kb.juniper.net/InfoCenter/index?page=content&id=KB4718&actp=METADATA and configure SSL access, still doesn't work then need to check get event and amy be debugs....
View ArticleRe: Cannot access Juniper SSG5 through https
OK, got it.First of all, SSL has to be enabled in two places, which many of your documents do not mention, but it was mentioned here by rselbert. Thank you and please correct your...
View Article