Juniper SRX Screens + Dynamic VPNs

Little tip with SRX Dynamic VPNs and ‘security screens’ on the VPN’s ingress zone I stumbled across during my JNCIE-SEC study. UPDATE (20120401): Seems Juniper has addressed and fixed this bug … More info: http://kb.juniper.net/InfoCenter/index?page=content&id=KB21713&actp=RSS  It seems you can not have the ‘IP Spoofing’ screen enabled when sending IPSec Dynamic VPN traffic ingressing into the zone with […]

Juniper EX Virtual Chassis Specific Member Config

EX VC tip of the moment: Use apply-groups to add specific config to each node. For example: [plain] set groups member0 system host-name member0 set groups member1 system host-name member1 set groups member2 system host-name member2 set apply-groups member0 set apply-groups member1 set apply-groups member2 [/plain]

Old Lady killing it … Hates a Radio

<p><span style="color:#ff0000;">This letter was sent to the Lions Bay School Principal's office in West Geelong after the school had sponsored a luncheon for seniors. An elderly lady received a new radio at the lunch as a door raffle prize and was writing to say thank you.</span></p> <p><span style="color:#ff0000;">This story is a credit to all humankind. […]

Microsoft NPS Server + Juniper JUNOS VSA

A lot of companies run Microsoft’s Active Directory AAA infrastructure. A nice add on to AD (apart from my favorite ‘Services for UNIX’) is the Network and Policy Server (NPS). Using this RADIUS server with any radius speaking client is a nice addon that allows the majority of Network infrastructure to use AD as it’s authoriative […]