You have recently deployed a dynamic VPN. The remote users are complaining that
communications with devices on the same subnet as the SRX device are intermittent and often
fail. The tunnel is stable and up, and communications with remote devices on different subnets
work without any issues. Which configuration setting would resolve this issue?
A.
adding local-redirect at the [edit security nat] hierarchy
B.
adding local-redirect at the [edit interfaces <interface-name>] hierarchy
C.
adding proxy-arp at the [edit security nat] hierarchy
D.
adding proxy-arp at the [edit interfaces <interface-name>] hierarchy
Explanation:
Reference : http://www.juniper.net/us/en/local/pdf/app-notes/3500151-en.pdf
[SRX] Dynamic VPN scenario for configuring Proxy ARP on SRX
http://kb.juniper.net/KB17442
0
0
do u mean the answer is D ?
0
0
no c . see the kb .
0
0
I guess C: is the correct one
For example, to configure Proxy ARP for two Dynamic VPN Pulse clients assigned the IP address 192.168.2.200 and 192.168.2.200, use the following command:
user@srx# set security nat proxy-arp interface ge-0/0/1.0 address 192.168.2.200 to 192.168.2.201
user@srx> show configuration security nat
proxy-arp {
interface ge-0/0/1.0 {
address {
192.168.2.200/32;
192.168.2.201/32;
}
}
}
0
0
C
To configure Proxy ARP:
user@srx# set security nat proxy-arp interface address
where is the interface facing the protected resources
0
0
Passed JN0-633 exam recently!
65 multiple choice questions, a little difficult to pass.
Pay close attention to questions on AppQoS, Routing (OSPF, BGP) in VPN (group, auto and hub-and-spoke), AppSecure, troubleshoot of IPSec, etc.
I learned valid JN0-633 dumps here:
http://www.passleader.com/jn0-633.html (209Q VCE and PDF)
Recommend to you!
0
0
P.S.
You can download that 209Q dumps for free, here:
https://doc.co/Tek7cT
Good Luck!
0
0