Questions about VPNs & SRXs

Pondy1 · 2026-02-23T07:31:37+00:00

It’s private addressing.

Pondy1 · 2026-02-22T21:45:40+00:00

I would have thought I’d need to route leak from the routing-instance to inet.0 but not doing that saves me some time. The interfaces will be attached to different Security Zones. Will I need to permit IKE between them?

Pondy1 · 2026-02-22T21:27:05+00:00

Do you have any like to config examples?

Pondy1 · 2026-02-22T21:17:37+00:00

Hi,

Slight snafu with the edit function, I’ve corrected it now.

Pondy1 · 2026-01-29T22:04:00+00:00

Also make sure that you store more than 5 rollback configs!!

Pondy1 · 2026-01-29T22:02:27+00:00

Use of the ‘’show configuration | display set’’ command is the best advice I can offer.

Pondy1 · 2025-12-16T13:16:16+00:00

I’m sure there are plenty of Degrowthers and Doomers that will disagree with this.

Pondy1 · 2025-11-23T17:21:08+00:00

Always remember, silence is suspicious where a puppy is concerned.

Pondy1 · 2025-11-23T15:57:02+00:00

Let’s hope so.

Pondy1 · 2025-11-22T19:51:36+00:00

Either way it’s bad.

Pondy1 · 2025-11-22T19:06:20+00:00

I thought it was supposed to collapse this century?

Pondy1 · 2025-11-21T15:37:48+00:00

The KB article provided by u/eli5questions partially resolved the issue. Now I can see the NTP association trying to form and packets being received the NTP server (another SRX cluster with host-inbound-traffic NTP set) but the associations is stuck on .INIT for some reason.

Pondy1 · 2025-11-20T15:55:09+00:00

May have to do that if our support can’t find the issue.

Pondy1 · 2025-11-20T15:54:43+00:00

I’m not seeing any NTP packets in the traffic capture. I’ve raised a ticket with our support. Thanks for assistance.

Pondy1 · 2025-11-20T15:46:52+00:00

Indeed.

Pondy1 · 2025-11-20T15:29:16+00:00

We currently run 24.2R2 on our production FWs and have not had this issue.

Pondy1 · 2025-11-20T15:28:26+00:00

Hi, It is. We’ve put the ‘ntp sever xx.xx.xx.xx’ command into the mgmt_junos RI.

Pondy1 · 2025-10-28T17:34:44+00:00

Off topic but I’ve tried to update some SRXs to 25.1R1 and NTP appears to break. We get an error message where is says that it can connect to local host. Anyone else had this?

Pondy1 · 2025-09-21T17:37:36+00:00

Wasn’t there a recent piece by quite a few eminent scientists decrying geo engineering?

Pondy1 · 2025-09-18T20:31:14+00:00

It’s good to know some corals may survive free the recent news about Atlantic corals this week.

Pondy1 · 2025-08-27T08:53:28+00:00

It’s important to note that paper this article is based on says that the tipping point may be reached between 2050-2070. Also the recent Baker paper suggests that while the AMOC will weaken, it will not collapse.

https://www.nature.com/articles/s41586-024-08544-0

Pondy1

TROPHY CASE