CloudLabBox
Try the free demo

Juniper vSRX in EVE-NG, ready to run

vSRX is already in the Add Node list of your CloudLabBox workspace, from the 12.1X releases to Junos 24.4. Start one in the browser and build zones, policies, NAT and IPsec without uploading an image.

Choose a planCheck it in the free demo

Vendor
Juniper
In Add Node
26 images
Templates
vsrxng vsrx
Newest
vsrxng-24.4R1.9

Installed versions

Every vSRX name in the Add Node image list, exactly as you’ll pick it.

Started in our checksEach links to the tested tip below.

Template vsrxng

vSRX NextGen template

24 images on this template. Newest first.

  • vsrxng-24.4R1.9
  • vsrxng-24.2R1-S1.10
  • vsrxng-24.2R1.17
  • vsrxng-23.4R2-S3.9Started in our checks
  • vsrxng-23.4R1-S2.4
  • vsrxng-23.4R1-S1.5
  • vsrxng-23.4R1.9
  • vsrxng-23.2R1.13
  • vsrxng-23.1R1.8
  • vsrxng-22.4R1-S1.1
  • vsrxng-22.4R1.10
  • vsrxng-22.3R1.11
Show 12 older
  • vsrxng-22.2R1.9
  • vsrxng-22.1R1.10
  • vsrxng-21.2R3-S3.5
  • vsrxng-20.4R3-S1.3
  • vsrxng-20.2R1.10
  • vsrxng-20.1R1-S2
  • vsrxng-19.4R2.6
  • vsrxng-18.4R3-S3
  • vsrxng-18.1R1.9
  • vsrxng-17.3R1.10
  • vsrxng-15.1X49-D220.2
  • vsrxng-15.1X49-D172.1

Template vsrx

vSRX template (12.1X images)

2 images on this template. Newest first.

  • vsrx-12.1X47-D20.7-domestic
  • vsrx-FireFly-12.1X44-D10.4-domestic

Add it to a lab

In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.

Add Node defaults for vSRX, read from the EVE-NG templates on 28 October 2026
ImageTemplateCPURAMInterfacesConsole
vSRX NextGen templatevsrxng24096 MB4 interfaces: fxp0, then ge-0/0/0 to ge-0/0/2telnet
vSRX template (12.1X images)vsrx22048 MB4 interfaces: ge-0/0/0 to ge-0/0/3telnet

EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 2 vCPU and 4,096 MB, which fits the free demo’s 6 vCPU and 8 GB, so you can start one there and open its console.

See default usernames and passwords Read every node tip

A site-to-site IPsec VPN between two vSRX

Put an Alpine Linux host behind each vSRX, build a route-based IPsec tunnel on st0 interfaces, then write the zones and policies that let the two hosts reach each other.

The NextGen template gives each vSRX four interfaces: fxp0 for management, then ge-0/0/0 to ge-0/0/2. Raise the Ethernets value in Add Node if your design needs more.

  • 2×vSRX NextGen template vsrxng2 vCPU, 4096 MB each
  • 2×Alpine Linux clbalpinebase2 vCPU, 512 MB each

Added with these defaults, the lab uses 8 vCPU and 9 GB of RAM. The smallest plan that fits is Standard, with 12 vCPU and 16 GB: £5 a day, or £1.25 an hour On-Demand.

Choose a planGive nodes more CPU or RAM and you add that instead.

Licences are yours to bring

Some vSRX features need a licence from Juniper, and CloudLabBox doesn't provide Juniper licences. Use your own licence or a Juniper evaluation, and request any activation destinations from your Account page.

The images run only inside your CloudLabBox workspace; they aren’t available to download.

Guided labs that use vSRX

Ready-made labs in the Shared folder of every lab workspace, each with a scenario, tasks, checks and the full solution. Here are 8 of the 54 that use it, from 7 courses, counted on 2 November 2026.

All guided practice labs

Questions about vSRX

What is Juniper vSRX?

vSRX is Juniper's virtual SRX firewall, running Junos: security zones and policies, NAT, IPsec VPN and the full Junos routing stack.

What's the difference between the vSRX and vSRX NextGen templates?

The vsrx template holds the two oldest images, vsrx-12.1X47-D20.7-domestic and vsrx-FireFly-12.1X44-D10.4-domestic, and adds them with 2 vCPU and 2048 MB. Every other vSRX image is on vsrxng, which adds 2 vCPU and 4096 MB and keeps fxp0 as the first interface.

Can a vSRX reach the internet from my lab?

Only the destinations you request and a person approves. Connect the vSRX's outside interface to an EVE-NG network of type Bridge, set that interface to DHCP, and don't add source NAT on the vSRX: CloudLabBox applies NAT after it.

Juniper: which vSRX image reached login, and which interface is management?

vsrxng-23.4R2-S3.9 reached its login prompt. Use the vSRX NextGen profile: the first adapter is fxp0 for management, and data adapters start at ge-0/0/0. Configure the required interfaces, zones, policies and routing for your firewall exercise.

From the node tips, updated 9 October 2026.

Juniper: how should I choose between vSRX3 and vSRX NextGen profiles?

Use the vSRX NextGen profile for new vSRX3 labs. Juniper documents on-premises AMD support from Junos 23.4R1; older versions in the catalogue are not covered by that support statement. The basic profile uses 2 vCPUs and 4 GB RAM. Keep an existing lab's profile and saved configuration together instead of changing profiles blindly. Profile availability is separate from the exact boot-tested image in the vSRX login tip.

From the node tips, updated 9 October 2026.

Which vSRX images are installed?

26 images (24 vSRX NextGen template, 2 vSRX template (12.1X images)), all listed on this page exactly as Add Node shows them. The newest is vsrxng-24.4R1.9.

How much CPU and RAM does a vSRX node use?

When you add one, the vsrxng template adds 2 vCPU and 4096 MB of RAM; the vsrx template adds 2 vCPU and 2048 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.

More images

CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.