What problem does it solve? Juniper SRX dynamic-address feeds let security policies reference IP lists that change frequently without re-committing configuration, but the setup spans feed archive layout, HTTPS/TLS validation, authentication, routing reachability, and Junos-specific failure modes like Recovery Mode after reboot. This Skill pins the agent to verified Junos syntax and operational checks so feed integrations work and survive reboots. ## Core Features & Use Cases - Feed Server Configuration: Build lab and production HTTPS feed servers (nginx, .tgz bundle archives) and map feed-name paths to dynamic address objects with correct Junos syntax. - TLS and Authentication Patterns: Configure CA profiles, SSL initiation profiles, certificate attribute validation, HTTP basic auth (Junos 25.2R1+), and mutual TLS client certificates. - Troubleshooting and Verification: Diagnose ipfd log errors (401, 403, certificate subject check failures), validate with show security dynamic-address commands, and avoid the non-reboot-safe routing-table pin defect on vSRX 24.4R1.9. - Use Case: A network engineer needs an SRX to pull a threat-intel blocklist from an internal HTTPS server every 60 seconds, enforce it in a deny policy with session scanning, and verify updates propagate without a commit. ## Quick Start Use the srx-dynamic-ip-feed skill to configure an SRX feed server that downloads my blocklist archive over HTTPS and apply it as a dynamic address in a deny policy.
