The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
17 views

Remote Setup and Configuration of SSG20

I have been asked to configure a VPN from a Netscreen SSG20 to a remote location. The SSG20, however is also in a remote location. I assume that the various guides and manuals will be sufficient to ...
1
vote
0answers
34 views

Netscreen Error showing up on 'get log sys' [closed]

I have Netscreen FW in pairs, on the master I do a get log sys, and I keep getting error of cksum error .... The Alarm LED on gthe front panel is ON How do I get rid of the ever popping up error of ...
1
vote
1answer
66 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
0
votes
1answer
151 views

Juniper Netscreen Remote - What is the interface / route config?

I'm wondering whether someone can tell me the mechanism by which traffic is routed to my office network via a VPN connection? Once I understand that I will hopefully be able to sort out the issues I ...
1
vote
1answer
267 views

ScreenOS MIP selection for outbound connections

Given a ScreenOS 6.3.0 firewall with this configuration: unset flow reverse-route clear-text set interface "ethernet0/0" zone "Trust" set interface ethernet0/0 ip 192.168.1.1/24 set interface ...
0
votes
1answer
211 views

Juniper NetScreen Policy for intra-vpn

I have Netscreen25 and three networks ( zones ): central, branch office, dial-up vpn, IPs in central network are in 10.0.0.0/24 range, branch office in 10.0.10.0/24 range and dial-up vpn in ...
3
votes
1answer
2k views

Cisco 3750 native vlan VLAN1 doesn't work in a Trunked configuration

I have two devices here, a Netscreen SSG520 and a Cisco 3750. #show ver Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2007 by ...
0
votes
3answers
431 views

juniper screen os and akamai

Need to setup a policy on juniper netscreen firewall that would allow access to a content hosted by akamai. There are two options: to use an IP address or hostname. Using hostname does not work with ...
1
vote
1answer
5k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
1
vote
1answer
371 views

Net Screen Remote RDP not working but vpn is

I have a problem regarding a connection with Netscreen-remote. First of all, to install the program I had to create a VM of XP x32b because of compatibility issues. Once it is installed, I imported ...
1
vote
1answer
825 views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
2
votes
5answers
2k views

Juniper NetScreen NS-5GT traffic monitoring

I've done casual research into the subject and am truly dismayed at the lack of compatible tools for such a simple task. Maybe someone can provide assistance. We have a NetScreen NS-5GT in the ...
1
vote
1answer
744 views

Routing for IPSec tunnel

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
1
vote
2answers
779 views

Netscreen-Remote Equivalent On Linux

We're running a simple Juniper VPN tunnel (using Juniper SSG5's) for outside-network access, which works great for Windows PCs since they can connect using the supplied Netscreen-Remote VPN client. ...
1
vote
1answer
177 views

Net Screen manager setup

I'm having an issue with our NSMExpress box. I'm trying to manage all our devices, range from ns5gt to ssg320m, and some of those devices have addresses assigned by dhcp from the ISP (like pppoe or ...
3
votes
6answers
11k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
2
votes
1answer
755 views

How do I bring up an interface on a netscreen router

I took down an interface using set interface ethernet0/0 phy link-down with the intention of cycling it back up - but now I can;'t figure out how to bring it up.
1
vote
3answers
1k views

Light packet loss through router

I just recently got a fiber line installed into my office, and with the exception of an odd bit of trouble that we're having, things are working good, and the network response is really amazing. The ...
2
votes
3answers
6k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
-1
votes
1answer
1k views

How to quickly and easily set up and maintain VPN's ? (Have Juniper SSG-140) [closed]

We have an SSG-140 by Juniper (similar to a netscreen 25, just a newer version of ScreenOS and more physical ports). I find setting up new VPN profiles to be a PITA. I have to follow a bunch of ...
0
votes
1answer
536 views

Wildcard Domain on Juniper Netscreen

On a Juniper Netscreen firewall, is there a character that can be used as a wildcard with a domain? For example, under the Objects -> Addresses section, if I want to create a new object similar to ...
0
votes
1answer
1k views

Netscreen-25 : Cannot forward port 443 to an internal server?

A customer is using a NetScreen-25 firewall. By default it has a web interface on port 80 and 443. I've changed the port for the HTTPS web interface to some other number that is not being used and ...
1
vote
6answers
9k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
2
votes
3answers
742 views

What's the best tool for usage reporting on a NetScreen Firewall?

Anyone got a good product for Usage Reporting for a NetScreen Firewall. I went looking for Webtrends Firewall Suite but it appears to have disappeared into the NetIQ product line up. I am going to ...
2
votes
5answers
5k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...