2
votes
1answer
85 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
0
votes
1answer
229 views

Juniper NetScreen Policy for intra-vpn

I have Netscreen25 and three networks ( zones ): central, branch office, dial-up vpn, IPs in central network are in 10.0.0.0/24 range, branch office in 10.0.10.0/24 range and dial-up vpn in ...
0
votes
3answers
443 views

juniper screen os and akamai

Need to setup a policy on juniper netscreen firewall that would allow access to a content hosted by akamai. There are two options: to use an IP address or hostname. Using hostname does not work with ...
1
vote
1answer
5k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
1
vote
1answer
872 views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
2
votes
5answers
2k views

Juniper NetScreen NS-5GT traffic monitoring

I've done casual research into the subject and am truly dismayed at the lack of compatible tools for such a simple task. Maybe someone can provide assistance. We have a NetScreen NS-5GT in the ...
1
vote
1answer
755 views

Routing for IPSec tunnel

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
1
vote
2answers
820 views

Netscreen-Remote Equivalent On Linux

We're running a simple Juniper VPN tunnel (using Juniper SSG5's) for outside-network access, which works great for Windows PCs since they can connect using the supplied Netscreen-Remote VPN client. ...
1
vote
1answer
180 views

Net Screen manager setup

I'm having an issue with our NSMExpress box. I'm trying to manage all our devices, range from ns5gt to ssg320m, and some of those devices have addresses assigned by dhcp from the ISP (like pppoe or ...
3
votes
6answers
11k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
1
vote
3answers
2k views

Light packet loss through router

I just recently got a fiber line installed into my office, and with the exception of an odd bit of trouble that we're having, things are working good, and the network response is really amazing. The ...
2
votes
3answers
6k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
-1
votes
1answer
1k views

How to quickly and easily set up and maintain VPN's ? (Have Juniper SSG-140) [closed]

We have an SSG-140 by Juniper (similar to a netscreen 25, just a newer version of ScreenOS and more physical ports). I find setting up new VPN profiles to be a PITA. I have to follow a bunch of ...
0
votes
1answer
557 views

Wildcard Domain on Juniper Netscreen

On a Juniper Netscreen firewall, is there a character that can be used as a wildcard with a domain? For example, under the Objects -> Addresses section, if I want to create a new object similar to ...
1
vote
6answers
10k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
2
votes
5answers
5k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...