vSphere – Adding a Serial Port to a VM
KB ID 0001039 Problem I wanted to perform command line access to a virtual firewall on my home ESXi server, (a Juniper Firefly vSRX) via a console session. To do that I needed to add a serial port to that VM. Solution 1. From Within the VI client > Select the ESXi Host > Configuration > Security Profile > Firewall Section > Properties. 2. Locate and enable ‘VM serial port connected over network’ > OK. 3....
Juniper SRX Firewall – Allow ‘Ping’
KB ID 0000706 Problem I was working on an SRX100B Firewall yesterday, and needed to be able to ping the outside interface. Solution Note: You can quickly enable ping on a physical interface from CLI like so; set security zone security-zone trust interface ge-0/0/0 host-inbound-traffic system services ping 1. Log into the web console of the Juniper. 2. Navigate to Security > Zones/Screen > Select the ‘Untrust’ Zone...
Juniper SRX Firewall – Allow Web Management from Outside
KB ID 0000708 Problem Assuming you already have web management enabled, and you want to access it from the outside (the untrusted zone). Solution 1. Log into the web console of the Juniper. 2. Navigate to Security > Zones/Screen > Select the ‘Untrust’ Zone > Edit > Host inbound traffic – Interface > Select the Outside interface > Under Interface services add in ‘http’ > OK. 3. Then...
Juniper SRX – Update the Operating System / Firmware
KB ID 0000989 Problem With two brand new SRX240 firewalls on the bench my first task was to get them updated to the latest operating system. Solution Before you start get the updated Juniper software. Option 1 Update the SRX firewall via Command Line 1. Connect to the firewall via either Console cable, telnet, or SSH. 2. Log on and then go to CLI mode, and then configuration mode. login: root Password: ******* — JUNOS...
Juniper SRX240 – Firewall Cluster (Active / Standby)
KB ID 0000990 Problem I’ve had very little exposure to JUNOS and Juniper equipment, and later in the year I have to deploy some for a client in a failover cluster. So I had a good look round on the Internet, and found loads of good blog posts and KB articles like this one. The problem is they are all geared to setting up a cluster, they ASSUME you then know about security zones, how to add default routes, and setup NAT etc. So...