Juniper SRX240 - Wiki

Check out our YouTube channel to watch our simple tutorials that will help you set up most of our features.

Juniper SRX240

From Wiki

Revision as of 14:14, 5 October 2016 by Carlb (Talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The Juniper SRX Series services gateways provide a hardware firewall platform for installation in Internet data centres.


Because of a NAT persistence need in the Juniper SRX series, in order to get VOIP calls to run properly, you need to get a few things done.
1. Make sure you have disabled SIP ALG before beginning.
2. In the CLI run "set security nat source interface port-overloading off" without the quotes.
3. You need to enable nat persistance in the srx's source nat transaltion config. This can be done via the gui too.
Config output from CLI example:

nat {
        source {
            interface {
                port-overloading off;
            rule-set trust-to-untrust {
                from zone trust;
                to zone untrust;
                rule source-nat-rule {
                    match {
                    then {
                        source-nat {
                            interface {
                                persistent-nat {
                                    permit any-remote-host;
Personal tools
Actions Blog
Guides (Français)
Guías (Español)