Trying to replace FVS336G with SRX5308 - Please help!

[wheminghou]

For whatever reason it appears I cannot post in the Enterprise category, so I will post it here and maybe a mod will move it for me. I currently have an FVS336G that I want to replace with an SRX5308 but they do not appear to route / behave in the same way at all. I will try to describe my configuration as simply as possible:

WAN1 71.34.23.2 ---\/
FVS336G - LAN 192.168.151.1 --> MT 192.168.151.8
WAN2 68.43.23.7 ---/\

This setup works well, I can access the MikroTik directly from internet on either of the WAN IP addresses and the users behind the Mikrotik (on another NAT subnet like 10.0.0.x) route out over both WANs randomly. If one of the two WANs goes down, the traffic is shifted to the good one automatically and life is happy.

I have been trying for over a week now to get the SRX5308 to do the same thing and it will NOT! The only way I can get it to route traffic is to lock it to a single WAN, it seems the load balancing does not play nice like on the 336G. It seems even worse now that I have upgraded to 3.0.7-45. Can anyone help?!

[jmizoguchi]

http://forum1.netgear.com/showthread.php?t=19284

192.168.151.1 --> MT 192.168.151.8

you can NOT use same lan subnet

both MUST be different for VPN tunnel to work

192.158.15.x a d 1-992.168.152.x both on class c 255.255.255.0

[wheminghou]

No, we are not doing any VPN here at all! In this example, 192.168.151.8 is the WAN IP of a MikroTik on the LAN side of the Netgear FVX5308. I have inbound and outbound firewall LAN-WAN rules that will allow ANY always from each of the WAN IPs to the LAN IP. This setup works perfectly fine on the FVS336G.

Again, we are NOT trying to do VPN, only 1:1 NAT

[jmizoguchi]

You need to hard reset the router and manually configure in 3.0.7 firmware flash

[wheminghou]

I am not sure I understand? I have upgraded to firmware 3.0.7-45, done a hard reset of the router and manually configured, but the configuration is still not working. Are you saying I need to downgrade?

[jmizoguchi]

downgrade is always an option as well which I never yet suggested.