I was experiencing a few network issues since this morning when I connected a switch to which a Proxmox host was connected to the SRX. It took me a few hours to realize that the VyOS VM was still running on it so I had two routers in the same network, all with the same VLANS, subnets and DNS settings. ...

Can we please get EX4000 stencils? ------------------------------ MARK JOHNS ------------------------------

I missed that part of your configuration yesterday. Yes, addresses need to be defined in an address book attached to the corresponding zone. Note that you can attach an address book to more than one zone, and you have a global address book, so you can organize addresses however you like. As for DHCP, ...

From 19.4, go via 20.4R3 to 21.2R3-S8. ------------------------------ Olivier Benghozi ------------------------------

I have tested the above configuration and it gives me the following error after loading the set: [edit security policies from-zone WORK to-zone LAN] 'policy ALLOW_DNS_1' warning: Destination address or address_set (192.168.10.110/32) not found. Please check if it is a SecProfiling Feed. *from-zone ...

Yes, that looks alright. ------------------------------ Nikolay Semov ------------------------------

Great Nicolay! The above works very well! Thank you for your help. If I was to add another rule for let's say maybe a local DNS server, could I just do something like this: #Set a group to allow access to a local DNS server set groups GROUP_ALLOW_DNS security policies from-zone <*> to-zone <*> ...