SRX IPSec Hub-and-Spoke VPN: Site-to-Azure, Site-to-AWS and Hybrid Branch
Configure Juniper SRX hub-and-spoke IPSec VPNs to Azure and AWS: IKEv2, route-based VPNs, BGP over IPsec, NAT-Traversal and routing-instance separation.
SRX Reth Interface Down but Physical Links Up? Chassis Cluster and LACP Fixes
The Juniper KB and community threads about a reth showing down while its member physical interfaces are up almost always end at LACP or cluster redundancy-group state. Here is the full diagnosis path with the exact show commands.
SRX NAT Not Working? Troubleshoot Source and Destination NAT with show security flow session
NAT is the number one SRX problem posted on Reddit and the Juniper forums. This field guide shows how to read show security flow session, verify NAT rule hits, fix proxy-arp and pin down why traffic is silently dropped.
SRX Zone-Based Firewall: Policies, Screens and NAT Explained
How the Juniper SRX security model works: security zones, address books, policies, screen options and source/destination NAT with a full example.