SRX

last person joined: 14 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Revenue Interface Zone

    Posted 06-29-2020 01:20

    Hello,

      

               I SRX series Revenue interface (Ge/0/0/0)  is Null Zone or Trusted Zone. According to the Juniper documentation all the ports are in Null Zone for a new SrX device.

     

    Thanks

    Syed



  • 2.  RE: Revenue Interface Zone
    Best Answer

     
    Posted 06-29-2020 01:29

    Hello , 

     

    Without any configuration , by default all the revenue  ports are in null zone . If you have factory default config then you will have them all in trusted zone . You can change them later as per your requirment . 



  • 3.  RE: Revenue Interface Zone

     
    Posted 06-29-2020 03:27

    Hi skhairuddin,

     

    Good day!!

     

    The SRX is a locked-down device. You can’t even ping an interface on the SRX initially, even if it has a valid IP address. The SRX uses the concept of nested security zones. Zones are a critical concept in SRX configuration. No traffic goes in or out unless the security zones are configured properly on the SRX interfaces.

     

    Please mark "Accepted Solution" if this helps.

    Kudos are always appreciated

     

    Thanks

    Suraj

     

     

     



  • 4.  RE: Revenue Interface Zone

    Posted 06-29-2020 03:41

    Hello,

     

     


    surajsr@juniper.net wrote:

     

     

     You can’t even ping an interface on the SRX initially, even if it has a valid IP address.

     

    Not true. The factory-fresh SRX is perfectly pingable, and even has DHCP server and HTTP server running

    https://www.juniper.net/documentation/en_US/release-independent/junos/topics/task/configuration/security-branch-device-configuration-srx210-viewing-factory-default.html

     

     


    surajsr@juniper.net wrote:

     

    The SRX is a locked-down device.

     

    Only after You zeroize it.

     

    HTH

    Thx

    Alex