SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  SRX 210 - No internet access using local network DNS

    Posted 01-03-2012 21:49
      |   view attached

    Hello Group

    I'm not a networking person so will try to explain as best I can.

    We have an exisiting network using Windows SBS (file/mail/dns/dhcp) and connect to our ADSL service via a Dlink modem.

    Replacing the Dlink modem with a Juniper SRX 210 (and ADSL pim) results in the following:

    - External addresses can be pinged.

    - a PC set to use our ISP external DNS can access websites.

    - a PC set to use the local DNS cannot access websites using a URL, that is 74.125.237.16 in the browser works but google.com in the browser doesn't.

    Testing DNS from the SBS results in external DNS queries failing.

     

    I've tried the tcp-mss - 1300, interface mtu -1492 settings and as a last resort disabled the DNS ALG. 

    Disabling the DNS ALG resulted in one website working though it wasn't google.com.

    Also, tried changing the default-deny to permit from untrust-to-trust.

    Strangely, when the SRX 210 is in the factory default DHCP mode then web browsing works.

     

    That's about as far as my current knowledge goes and any pointers as to where to look next would be greatly appreciated.

    Cheers

    Andrew

    Attachment(s)

    txt
    testconfig.txt   6 KB 1 version


  • 2.  RE: SRX 210 - No internet access using local network DNS
    Best Answer

    Posted 01-06-2012 22:34

    Found the problem to be the proxy-arp configuration. In this instance the interface should be changed from pp0.0 to at-1/0/0.0, as follows:

     

    proxy-arp {

            interface at-1/0/0.0 {

                    address {

                            192.168.1.10/32;

                    }

            }

    }

     

    Now on to the next challenge!

    Cheers

    Andrew