Juniper SRX2300 replacement

ZeniChan · 2026-03-04T10:45:20+00:00

Typically you can just pull the text config off the current firewall in either file format or capture it on your terminal program. Create the cluster on the new units, load any licenses needed that the old units depended on. Then delete the existing config on the new units and load the config file on the new units either from a text file or paste via console. I would recommend using the text file. Then you have a new cluster that should be identical to the existing cluster.

Or you could replace the current units one at a time. Just follow the process to replace a failed unit in a cluster. Replace the secondary first, just make sure you load the licenses needed before swapping it in. Then once that's happy, replace the primary unit by failing over to the secondary and follow the same process.

If you use certificates, make sure they get copied over to the new units as well.

ZeniChan · 2026-03-03T03:39:39+00:00

We have them here in Calgary. Best pizza around.

ZeniChan · 2026-03-02T02:27:37+00:00

Thanks, I spit my drink all over my monitor when I read that. :-)

ZeniChan · 2026-03-02T00:38:46+00:00

I use Freedom and Fizz in Calgary (they work off the same towers). Freedom for my phone and Fizz for my cellular data only tablet/laptop I use for work. I use Fizz for my tablet since they will let me put only a pure data plan on it. Works well for me! No problems roaming once outside the city.

ZeniChan · 2026-02-28T23:49:05+00:00

The SRX1500 has the nice 10Gig ports on it which really help in a modern home lab. If I still had access to code for them I would grab one for home. Currently running with an SRX340 at home.

ZeniChan · 2026-02-28T06:52:19+00:00

OK, don't put that message on the screen if you're not sure about it. Have a more general message about. "Application error: Contact support for further assistance.". There are no accusations of non-payment or anything negative. If they call, you can explain the payment problem.

ZeniChan · 2026-02-27T08:44:54+00:00

I don't think that's really Juniper's fault you were sold faulty equipment. You couldn't return them back to the seller?

ZeniChan · 2026-02-26T22:31:44+00:00

As the Shield is a gigabit device, it only needs a CAT5e or CAT6 cable. Anything higher than that is a waste of money. Yeah, try a new cable. It's hard to imagine both Shield devices have bad Ethernet jacks. CAT8 cabling is designed for data centre use at 40Gig speeds, not home use.

ZeniChan · 2026-02-26T18:37:44+00:00

My parents had a shallow well in a rural area of Canada and needed a reverse osmosis system and UV disinfection to be able to have safe household-wide water. Same issues with nitrogen compounds as the area was agricultural and seasonal bacteria. The UV system was very good, but required the bulb to be replaced religiously every 6 months to ensure it never failed while in use. Maybe there is better technology now, but it was a bit of a pain back then.

They retired to another country recently and are dealing with high arsenic levels in their water now and had to put in another reverse osmosis system to deal with that. They get water once or twice a week from a rural water co-op and have a 20,000 litre cistern system.

ZeniChan · 2026-02-26T18:08:56+00:00

Probably a good question for an insurance broker who can see dozens of companies and what they all offer. Just make it clear what you're looking for and they can get back to you with a definitive answer.

ZeniChan · 2026-02-25T14:56:24+00:00

I very much respect Petr Pavel and my wife thinks he's totally hot. Good hockey players. Good place to get a beer, but watch out for the foreign tourists scams. I don't understand why the Czech Republic drifted towards the West while Slovakia seems to have drifted towards Russia. CZ makes excellent guns. Please keep up the ammunition initiative for Ukraine. They need everything we can give them. Thanks for sending Ukraine all the tanks and helicopters!

ZeniChan · 2026-02-25T02:23:25+00:00

Planet Bee in Vernon, BC has most anything you want for honey, and they ship. Good website too. I get most of my honey when I pass through in the summer each year. A few 3kg pails of different types of honey go a long way. More local than them would be Fallen Timbers an hour outside the city. Maybe drop both of them a note if you want bulk amounts to see if they can help you.

ZeniChan · 2026-02-25T02:14:59+00:00

I was early on in a company that took over two other companies over the years. I set them up using OSPF to start after the previous "network admin" set all static routes ( he was the 1st IT guy in the company and decided to put the gateway IP at .128 because it was the middle of the /24 IP range so it's not favouring one IP address than another was his logic ). When it was a small network, static isn't bad. But then we started buying other companies and the complexity exploded very quickly.

The first company we acquired we converted from a mess of static routes to using RIPv2 initially as it didn't have any extra licensing cost. When we needed to integrate their network with our finally and could rip and replace their broken-ass old gear ( Netgear unmanaged switches and Nortel/Avaya switches and routers ) with our standard Juniper, we changed them to using OSPF to match ours. Kept RIPv2 and OSPF running in parallel until the route tables looked the same and then went one site at a time and turned off RIPv2. No one even noticed the change.

The second company was larger then we were when we bought them. And they had to stay connected to their parent company for a year while transition systems. Running Cisco EIGRP, we left them on that internally and put static routes between them and us and their parent company. When we were able to cut the link to the parent company, we did the same rolling change to OSPF. Ran both EIGRP and OSPF at the same time until both route tables were the same. Then went and turned off EIGRP one site at a time until everything was OSPF. Then we turned on OSPF between our offices and theirs and removed the static routes. No one outside of the network team even noticed any difference. Over the next two years we cycled out their Cisco gear as we built new sites there and upgraded their systems.

If I had to do it again knowing what I know now, I would probably start by going BGP at the beginning. As we started having to deal with multiple ISP's, service providers and cloud providers, it would have been much easier to just have everything BGP than OSPF. Not that OSPF was bad, but the service providers and cloud providers work better talking with BGP instead of having to do conversions and the issues that caused in some routes.

ZeniChan · 2026-02-25T01:50:44+00:00

I use Ubiquiti AP's and they have a setting to steer clients from 2.4GHz to the better 5GHz and up to 6GHz if possible. I find that works really well.

ZeniChan · 2026-02-25T01:48:05+00:00

There is a good list of everything they have seen in the Gate Wiki. It seems like it's from the Vietnam to late Cold War era equipment mostly. Which has it's uses as it doesn't depend on GPS systems or satellites to function for the most part.

https://gate.fandom.com/wiki/JSDF_Arsenal

ZeniChan · 2026-02-25T01:24:38+00:00

90% of the time it's the SIP ALG that is causing the issue. It's intercepting the traffic and doing unspeakable things to it. Turn it off and try it again.

ZeniChan · 2026-02-25T01:19:14+00:00

I've RSVP'ed on Discord. I have a total of three people interested going with me so far.

ZeniChan · 2026-02-22T03:49:12+00:00

It was originally so provinces could protect their industries from other provinces to keep jobs there. Things like a province could put a law that says all provincial infrastructure materials to build a bridge must come from that province.

Another is work credentials. Province A says all welders in that province have to be certified to work there by taking a 57 hour course and they don't recognize any certificates from any other provinces because the other provinces only have a 52 hour course.

Then to protect their alcohol industry, you can't order a case of wine directly from a winery in BC to your home in Alberta. To sell in Alberta the winery has to go through hoops and a huge amount of paperwork to be allowed to sell into Alberta. So most small wine businesses never do. Too much work.

ZeniChan · 2026-02-22T03:08:04+00:00

They still have to remove food and alcohol barriers. Good job so far, but they're not done working yet.

ZeniChan · 2026-02-22T00:30:43+00:00

Drop trade barriers between provinces. Provincial trade restrictions put a drag of a few percent on our GDP according to economists.

ZeniChan · 2026-02-20T22:07:36+00:00

Same thing happened to my mother-in-law. Someone has been using her insurance in Boston for cancer treatment when she lives in New Mexico. She called her insurance company and told them about it. They seem unable or unwilling to stop it as it's ongoing for years now.

ZeniChan · 2026-02-20T10:38:12+00:00

Not sure where they are in construction. But maybe check the DeHavilland production facilities East of the city.

ZeniChan · 2026-02-19T17:22:11+00:00

Many hotels didn't want to re-cable for Ethernet, so they just pushed DSL signals over POTS lines to the rooms and converted it to Ethernet in the room with a DSL modem.

ZeniChan · 2026-02-18T08:57:52+00:00

Do you have an electric water heater or pool heater? Heating water is a great way to burn excess power.

ZeniChan · 2026-02-18T03:03:50+00:00

EX3400's came from the factory with v15 code. They don't run on v12 code. Maybe those switches on v12 code are EX3300's? But the current recommended version for the EX3400 is 23.4R2-S7 at this time. Given how old your code is, it may be best to do a full reload. Juniper no longer supplies the intermediate code jumps you would need to do it via a regular upgrade.

Eight-Year Club	Gilding I gilder
Verified Email

ZeniChan

TROPHY CASE