{"id":953,"date":"2015-11-18T00:44:46","date_gmt":"2015-11-18T00:44:46","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2015\/11\/18\/configuring-service-offload-on-the-junper-srx\/"},"modified":"2021-07-31T16:52:07","modified_gmt":"2021-07-31T16:52:07","slug":"configuring-service-offload-on-the-junper-srx","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Firewalls\/Juniper\/configuring-service-offload-on-the-junper-srx.html","title":{"rendered":"Configuring Service-Offload on the Juniper SRX"},"content":{"rendered":"
1. First configure the FPC\/PIC (I believe on the SRX1400 if the NP-IOC is in slot 2 it would be FPC2 PIC0 but you can confirm)<\/p>\n
2. Then setup a policy from zone x to zone y to allow whatever addressing\/protocol and permit services-offload feature for that traffic<\/p>\n
3. Then confirm your config
\n>show configuration chasssis
\n>show configuration security policies from-zone x to-zone y policy services-offload (etc… depending on what zones and policy is named)<\/p>\n
1. To determine if hardware knows it is configured for service offload
\n>show chassis fpc pic status node0 (this should show the fpc\/pic with service offload out to the side to confirm the hardware is ready)<\/p>\n
2. Once traffic is flowing through the firewall you can look at the traffic flow by… Service Offload Configuration Commands 1. First configure the FPC\/PIC (I believe on the SRX1400 if the NP-IOC is in slot 2 it would be FPC2 PIC0 but you can confirm) 2. Then setup a policy from zone x to zone y to allow whatever addressing\/protocol and permit services-offload feature for that traffic 3. Then confirm … Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[],"yoast_head":"\n
\n>show security flow session services-offload
\n>show security flow session services-offload <brief> <extensive> <summary>
\nhttp:\/\/www.juniper.net\/techpubs\/en_US\/junos12.1×46\/topics\/reference\/command-summary\/show-security-flow-session-fast-forward.html<\/a>
\n>Then any other security show comands we did in the seminar training, like show security policies hit-count, etc…
\n>Note: There is no easy way to prove the exact latency without a test set or some other test stream that I am aware of…<\/p>\n","protected":false},"excerpt":{"rendered":"