Difference between revisions of "SRX notes"

From cpwiki.net
Jump to: navigation, search
Check Point Profressional Services
(Pushed from Themanclub.)
 
(Pushed from Themanclub.)
Line 3: Line 3:
  
 
monitoring traffic example
 
monitoring traffic example
   monitor traffic matching "host 76.185.116.115" no-resolve interface reth0
+
   monitor traffic matching "host 10.0.0.1" no-resolve interface reth0
  
 
show cluster status  
 
show cluster status  
Line 20: Line 20:
  
 
add proxy arp
 
add proxy arp
   set security nat proxy-arp interface reth0 address 171.162.209.220
+
   set security nat proxy-arp interface reth0 address 192.168.1.1
  
 
[[category:juniper]]
 
[[category:juniper]]

Revision as of 16:13, 24 May 2013

junos SRX notes


monitoring traffic example

  monitor traffic matching "host 10.0.0.1" no-resolve interface reth0

show cluster status

 root@SRXfw> show chassis cluster status 
 Cluster ID: 1 
 Node                  Priority          Status    Preempt  Manual failover
 Redundancy group: 0 , Failover count: 0
     node0                   200         primary        no       no  
     node1                   100         secondary      no       no  
 Redundancy group: 1 , Failover count: 3
     node0                   200         secondary      no       no  
     node1                   100         primary        no       no

show security rules

  ...?

add proxy arp

 set security nat proxy-arp interface reth0 address 192.168.1.1