Re: [j-nsp] Problem with Active Directory with my SRX

2014-03-07 Thread Shombra
Thanks so much, now work. Regards, Carlos On Mar 7, 2014, at 3:25 PM, Per Westerlund wrote: > What version are you running? > > Not knowing the rest of the setup makes it hard to guess what it could be. > Unless there are some filters on interfaces, I would suspect the DNS ALG, it > has som

Re: [j-nsp] Problem with Active Directory with my SRX

2014-03-07 Thread Per Westerlund
What version are you running? Not knowing the rest of the setup makes it hard to guess what it could be. Unless there are some filters on interfaces, I would suspect the DNS ALG, it has sometimes caused problems. If you are allowed to make changes to the ALGs, one thing to try could be: [edit]

[j-nsp] Problem with Active Directory with my SRX

2014-03-07 Thread Shombra
Hi all, First of all, sorry my english is not so good. I’m using VPN P2P in my network. In my Data Center, I have 2 SRX240 in cluster, and my servers, my problem is with my Active Directorie. the problem is, when I put one PC in the domain this PC doesn’t dynamically register in the DNS, I ch

[j-nsp] Experience with QFX5100?

2014-03-07 Thread Richard Hartmann
Dear all, we are looking at QFX5100 at the moment and would like to know if anyone can tell us about its stability. The platform itself is relatively new, but our initial needs are quite sane: * BGP * OSPF * Static routes * MC-LAG * MPLS P We would likely increase this a bit over time as we bec

Re: [j-nsp] Config ordering of security address-book and address-set members

2014-03-07 Thread Ge Moua
or maybe use 'sort -u' to only see unique matches; 'sort' by itself would contain hit count per unique entry though . . . . but you get the idea :-) Regards, Ge Moua moua0...@umn.edu University of Minnesota Alumnus -- On 3/7/14, 6:16 AM, Ge Moua wrote: quick & dirty 3-step to achieve said

Re: [j-nsp] Config ordering of security address-book and address-set members

2014-03-07 Thread Ge Moua
quick & dirty 3-step to achieve said results: 1) save srx to set-style: show configuration | display set | no-more 2) save output to plain-text for parsing 3) cat | egrep -i 'address-book' | egrep -i 'address-set' | awk '{print $8}' | sort caveat: * one could put a shell / script wrapper aro

Re: [j-nsp] Config ordering of security address-book and address-set members

2014-03-07 Thread Per Westerlund
I don't KNOW why, but I realize that some want their entries sorted on address, others on name; therefore it is in insertion order with the possibility to reorder by ”insert …..” (or reorder externally, den delete and reapply content). /Per 7 mar 2014 kl. 11:02 skrev Phil Mayers : > Does anyon

[j-nsp] Config ordering of security address-book and address-set members

2014-03-07 Thread Phil Mayers
Does anyone know why JunOS on SRX doesn't apply alphabetical ordering for address-book members and address-set members? It seems rather pointless to have them ordered by insert order, since they don't have precedence - that all happens inside the policies. (We care because we have similar conf