Skip to content
PSUS's profile

Occasional Visitor

 • 

7 Messages

Tuesday, June 6th, 2017 5:00 AM

Problems using my own firewall

Hi we are having some problems, we are trying to change firewall.

to a new solution with failover wiwth 2 junipers.

System works with the one we use today but when we change to the new ones.

system goes offline. Could it be a problem with the comcast modem.

Not releasing so the system is ready for the new firewall ?

Thanks

René

 

Gold Problem solver

 • 

575 Messages

7 years ago

Hello René and welcome to forums,

 

I would like to get more information from you on your configuration to make sure the Comcast equipment is setup properly.

 

Are you using the Comcast service as the primary or the failover connection?

Which system are you referring to that is going offline, your network equipment (router) or a system on your network?

Does this system house a static IP or is a router taking that address?

Is this system or router handling DHCP on your network?

Are you able to check the Comcast connection directly to ensure it is working? (i.e. connect a laptop for direct connect)

Have you checked to see if the firewall has been disabled on your Comcast equipment?

 

I have plenty more questions to help you isolate this issue, please provide us with more details so I can better assist you.

 

Thank You

Occasional Visitor

 • 

7 Messages

7 years ago

Hi Michael

 

Thank you for the respons,

 

This is our primary connection, The Comcast Cable Modem is set up to Disable Firewall true Static Subnet Only.

The Solution works today with our Firewall today.

But we want to change our own FW with two Juniper FW in cluster mode.

But when i try to make the change there is no access from the outside.

My question is, do the Comcast Cable modem lock the system to our FW we are using today ?

I cant see that there should, be anything. I Have just made a similar solution on another location.

And there is no problems. That is not on a Comcast connection.

 

BR

René

Gold Problem solver

 • 

575 Messages

7 years ago

At times the routing functions of our gateways can cause issues with connecting to devices. If you have static assignments or have your own equipment providing DHCP addressing,I can put your modem into "True Bridge Mode" basically forcing it to be a single internet connection that responds to your static IP assignment. Is this an option you would like to try?

Occasional Visitor

 • 

7 Messages

7 years ago

Hi

 

We have static assignment, so lets please try the bridge mode.

 

Thank you

Gold Problem solver

 • 

575 Messages

7 years ago

Thank you,

 

In order to complete the bridge mode I wold have to rest your modem. I don't want to interrupt business so do you have a preferred time of day for this rest? (AM|PM)

Occasional Visitor

 • 

7 Messages

7 years ago

Hi yes if you could do it 02:00 AM that would pe perfect.

 

Thank you

 

 

Gold Problem solver

 • 

575 Messages

7 years ago

My apologize but getting the rest schedule for that time has not played in my favor. Do you have a different time that would be feasible. Something outside of you hours of operation so as to minimize the impact of the rest?

Occasional Visitor

 • 

7 Messages

7 years ago

Should i supply a mac adress or something so we can try to fix this problem.

 

Thank you

Occasional Visitor

 • 

7 Messages

7 years ago

Hi

 

The line is in use most from 6 AM to 6 PM If you can do it on another time.

or please give me a suggestion ?

 

Thank you

Gold Problem solver

 • 

575 Messages

7 years ago

Thank You René,

 

I have put your modem into bridge mode. Please be sure to have your router programmed with your static IP and the it (or your server) give out DHCP addresses. Please message back if you need any assistance.

 

Thank YOu

Occasional Visitor

 • 

7 Messages

7 years ago

Hi Michael

 

Sorry not to be getting back before now.

I have just tried for about 30 min ago to put on my Juniper Firewalls.

I need to tell you that it is to juniper Boxes there will be running in HA mode.
Is there something that prevent me from doing this. ?

Shouldnt i be able to do this on your solution ?

 

BR René Nielsen

Advocate

 • 

1.1K Messages

7 years ago

 

Hello PSUS.

 

I would like to assist and review the configuration of your gateway. Please private message me the mac address found on it.