Similar experience with a srx650 cluster on 10.4. ISP did not have their Ethernet links set to auto/auto since that is all reths support in a cluster. They would randomly stop forwarding traffic and could be fixed with failing the cluster to the secondary node. It was impossible to trouble shoot from my side since the physical information about the ge ports is incorrect in the cluster.
Not sure how this got hijacked into a srx complaint list. :) Other than that and ALG completely broken, things have been great! On Sep 1, 2011, at 12:05 PM, Nathan Sipes <nathan.si...@gmail.com> wrote: > I have had similar experiences to Richard's with the "Free SRX210H" I even > managed to get a DSL PIM in there as well. Had it up and working for about 2 > months when the pim quit forwarding traffic randomly. Rebooting the SRX > seems to fix it well enough though... I will say that the free hardware has > cost a lot of my time and some annoyed phone calls from my wife when netflix > doesn't work. > > > > On Thu, Sep 1, 2011 at 9:48 AM, Paul Stewart <p...@paulstewart.org> wrote: > >> Actually I'm curious as well - RAS is not typically wrong though about this >> kind of stuff ;) >> >> We have numerous SRX deployed for firewall and router functionality - some >> are running Dynamic VPN (which yes, we've had issues with - definitely it's >> not perfect). We've been bitten by some surprises as well ... so I'm not >> disagreeing, just saying that we're pretty used to these issues we've >> encountered and don't deploy if we know they will come up. Typically, we >> use >> them as site to site VPN boxes along with firewalling. >> >> I have an SRX210 at my home as well - run the full UTM suite on it and had >> no real issues (granted it's a home environment to be fair). >> >> RAS, can you share a few highlights of "broken"? >> >> Appreciate it, >> Paul >> >> >> -----Original Message----- >> From: juniper-nsp-boun...@puck.nether.net >> [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Phil Mayers >> Sent: September-01-11 11:35 AM >> To: juniper-nsp@puck.nether.net >> Subject: Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826 >> >> On 01/09/11 10:09, Richard A Steenbergen wrote: >> >>> I have an SRX210 in my basement doing my home routing, and it is the >>> only free device I've ever been given that I would seriously consider >>> returning and asking for my money back. Broken doesn't even begin to >>> describe it, my condolences to anyone who actually needs to run these >>> things in production. >> >> Is this for routing functionality, or firewall functionality? >> >> We're using one as an MPLS PE, and it seems to be working ok, but given >> what you've said... gulp! >> >> Is there a good summary of the problems anywhere, or do I need to trawl >> the archives? >> _______________________________________________ >> juniper-nsp mailing list juniper-nsp@puck.nether.net >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> >> _______________________________________________ >> juniper-nsp mailing list juniper-nsp@puck.nether.net >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
