SRX

last person joined: 4 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  Troubleshooting DHCP relay

    Posted 02-17-2016 07:56

    Hi,

     

    SRX650

     

    How to apply this filtering with "sample" mode , in to order to sample destination-mac-address to PCAP file .

     

    [edit firewall]
    family bridge {
    filter evil-mac-address {
    term one {
    from {
    destination-mac-address 88:05:00:29:3c:de/48;
    }
    then {
    sample
     
    Why there is no option to sample mac addreses ?


  • 2.  RE: Troubleshooting DHCP relay
    Best Answer

    Posted 02-18-2016 04:43

    Hello,

    "Sampling" bridged traffic is otherwise called Sflow and Sflow is not supported on SRX.

    https://en.wikipedia.org/wiki/SFlow

    But You should be able to t'shoot DHCP (relay or no relay) by matching on UDP/67-68.

    HTH

    Thx

    Alex

     



  • 3.  RE: Troubleshooting DHCP relay

    Posted 02-18-2016 06:18
    Many thanks to you 🙂