Juniper SRX240H occasionally dropping connections

juniperjunos

One of our clients has an SRX240H in their office that occasionally is dropping connections going LAN to WAN. For example: they could be on an IRC server and they will drop out for 2 minutes and then come back or an HTTP download will die half way through. We've ruled out upstream problems with the ISP.

What steps can I take to diagnose this? We only have remote web access to this device, but can probably get SSH if required.

UPDATE

I shall find out what version of JunOS it is back in the office tomorrow.

The scenario is the clients office has a fibre connection to our DC with two VLANs, one presenting internet and one presenting their office infrastructure (AD, file servers, etc). It's a gigabit connection, and they use it as such to access their file server etc all day.

It's possible it's overloading it, but on paper it should be MORE than capable.

Best Answer

If you use the built-in Junos "applications" in your permit rules, then these come along with some cute hidden settings that control the timeouts per application (fun!). From an operational command line, run the command

show configuration groups junos-defaults applications

to see what the defaults are. Now... past that, I need to ask do you having the device source NAT a single WAN IP or you using a pool. what version of JUNOS is on the box?

Related Solutions

Router – Juniper router dropping pings to external interface

I work for an ISP, and what I can tell you about the routers we provide for our T1s is that when the internet connection goes down, it renders the WAN and LAN interface null to pings. We don't use Junipers, but this is the case on the Cisco 1841s, samsung ubigate 1000s and netopias that we use. It has to do with the way the IP is provided and the way the routed block is provided through the WAN IP that make them unreachable without a connection to our core routers.

Configuring routing in Juniper router

Because this is an SRX, there are a number of requirements here.

Step 1:

Define VLANS (think layer 2)

set vlans vlan1 description desktops vlan-id 1 l3-interface vlan.1

set vlans vlan2 description servers vlan-id 2 l3-interface vlan.2

Step 2:

Define L3 interfaces bound to those vlans...

set interfaces vlan unit 1 family inet address 10.0.1.1/24

set interfaces vlan unit 2 family inet addresses 10.0.2.1/24

Step 3:

Place those L3 interfaces into a zone

set security zones security-zone trust interfaces vlan.1

set security zones security-zone trust interfaces vlan.2

Step 4:

Since this is an SRX, you must create a policy permitting intra-zone traffic

set security policies from-zone trust to-zone trust policy trust-to-trust match source-address any destination-address any application any then permit

Step 5:

Set physical interfaces onto that VLAN

set interfaces ge-0/0/0 unit 0 family ethernet switching port-mode access vlan members vlan1

set interfaces ge-0/0/1 unit 0 family ethernet switching port-mode access vlan members vlan2

Step 6:

Plug devices in. Once any interface assigned to that VLAN is physically up, the VLAN interface for that VLAN will come up.

Best Answer

Related Solutions

Router – Juniper router dropping pings to external interface

Configuring routing in Juniper router

Related Topic