The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
1answer
123 views

VLAN isolation failure with HP Procurve, Juniper Netscreen

I'm having problems with hosts being able to ping other hosts they shouldn't be able to communicate with. Fairly simple network - relevant hardware: HP Procurve 2810-24G switch Juniper Netscreen ...
0
votes
1answer
787 views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
1
vote
0answers
51 views

Netscreen Error showing up on 'get log sys' [closed]

I have Netscreen FW in pairs, on the master I do a get log sys, and I keep getting error of cksum error .... The Alarm LED on gthe front panel is ON How do I get rid of the ever popping up error of ...
2
votes
1answer
119 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
0
votes
1answer
243 views

Juniper Netscreen Remote - What is the interface / route config?

I'm wondering whether someone can tell me the mechanism by which traffic is routed to my office network via a VPN connection? Once I understand that I will hopefully be able to sort out the issues I ...
1
vote
1answer
454 views

ScreenOS MIP selection for outbound connections

Given a ScreenOS 6.3.0 firewall with this configuration: unset flow reverse-route clear-text set interface "ethernet0/0" zone "Trust" set interface ethernet0/0 ip 192.168.1.1/24 set interface ...
3
votes
1answer
4k views

Cisco 3750 native vlan VLAN1 doesn't work in a Trunked configuration

I have two devices here, a Netscreen SSG520 and a Cisco 3750. #show ver Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2007 by ...
1
vote
1answer
8k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
1
vote
1answer
418 views

Net Screen Remote RDP not working but vpn is

I have a problem regarding a connection with Netscreen-remote. First of all, to install the program I had to create a VM of XP x32b because of compatibility issues. Once it is installed, I imported ...
1
vote
1answer
1k views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
2
votes
5answers
3k views

Juniper NetScreen NS-5GT traffic monitoring

I've done casual research into the subject and am truly dismayed at the lack of compatible tools for such a simple task. Maybe someone can provide assistance. We have a NetScreen NS-5GT in the ...
1
vote
1answer
790 views

Routing for IPSec tunnel

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
1
vote
2answers
908 views

Netscreen-Remote Equivalent On Linux

We're running a simple Juniper VPN tunnel (using Juniper SSG5's) for outside-network access, which works great for Windows PCs since they can connect using the supplied Netscreen-Remote VPN client. ...
1
vote
1answer
181 views

Net Screen manager setup

I'm having an issue with our NSMExpress box. I'm trying to manage all our devices, range from ns5gt to ssg320m, and some of those devices have addresses assigned by dhcp from the ISP (like pppoe or ...
3
votes
6answers
12k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
3
votes
1answer
1k views

How do I bring up an interface on a netscreen router

I took down an interface using set interface ethernet0/0 phy link-down with the intention of cycling it back up - but now I can;'t figure out how to bring it up.
1
vote
3answers
2k views

Light packet loss through router

I just recently got a fiber line installed into my office, and with the exception of an odd bit of trouble that we're having, things are working good, and the network response is really amazing. The ...
2
votes
3answers
8k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
-1
votes
1answer
2k views

How to quickly and easily set up and maintain VPN's ? (Have Juniper SSG-140) [closed]

We have an SSG-140 by Juniper (similar to a netscreen 25, just a newer version of ScreenOS and more physical ports). I find setting up new VPN profiles to be a PITA. I have to follow a bunch of ...
0
votes
1answer
633 views

Wildcard Domain on Juniper Netscreen

On a Juniper Netscreen firewall, is there a character that can be used as a wildcard with a domain? For example, under the Objects -> Addresses section, if I want to create a new object similar to ...
0
votes
1answer
1k views

Netscreen-25 : Cannot forward port 443 to an internal server?

A customer is using a NetScreen-25 firewall. By default it has a web interface on port 80 and 443. I've changed the port for the HTTPS web interface to some other number that is not being used and ...
1
vote
6answers
15k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
2
votes
5answers
6k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...