The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
157 views

ScreenOS MIP selection for outbound connections

Given a ScreenOS 6.3.0 firewall with this configuration: unset flow reverse-route clear-text set interface "ethernet0/0" zone "Trust" set interface ethernet0/0 ip 192.168.1.1/24 set interface ...
0
votes
2answers
108 views

How to restict telnet from Juniper firewall?

Can telnet everywhere from the appliance without any traffic / event logs. It seems to disregard the global policy we have set for blocking all traffic unless specifically permitted.
0
votes
0answers
8 views

Any way to preserve comments inside ScreenOS conf on Juniper?

As per title. At the moment the comments are accepted for conf loads and manually entered commands but do not get saved to flash. Perhaps there is a trick or command to "commit" comments?
0
votes
2answers
139 views

Can Juniper SSG be used as DNS recursor?

As per title. e.g. 1. client asks example.com <--> Juniper_SSG_140 2. Juniper_SSG_140 <--> DNS root servers 3. <--> Specific DNS returned by root server 4. client ...
-2
votes
1answer
91 views

What is the story with 64 reserved address limit on Juniper's DHCP server?

It's a very strange limitation, any way to increase it?
5
votes
1answer
388 views

Juniper SSG20 - Bridge ADSL to ethernet interface

We're trying to reuse some leftover equipment we've got. I've got a Juniper SSG20 with 2x ADSL2/2+ mini-PIMs and we've already got a firewall solution (Which will act as the PPPoE Client) but what we ...
0
votes
1answer
324 views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
0
votes
2answers
908 views

Juniper ScreenOS vlan configuration

Trying to configure my first Juniper firewall, an SSG5 (running 6.2.0r11.0), but having some trouble with the vlans. I haven't found much documentation relating to what I'm trying to do; possibly ...
5
votes
2answers
453 views

ScreenOS ip6in4 tunnel over transport mode ipsec?

I have setup a point to point transport ipsec session between a ScreenOS router (SSG-5) and a Cisco 3925. The ipsec transport itself works great, but as soon as I try to direct the protocol 41 ...
1
vote
1answer
3k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
0
votes
1answer
291 views

Cisco Catalyst 3550, ScreenOS, IOS Fundamentals, Juniper ssg5 NetScreen vlan

i have two vlans configured into a juniper netscreen (a screenOS device). I have connected a catalyst to the nic i have configured the vlans on. I need an example configuration to shoot into the cisco ...
1
vote
0answers
933 views

OpenVPN & Juniper SSG-140

I asked this question over on some Juniper Forums but they seem to be pretty dead as in over a week it hasn't had that many hits and no one has had any advice. I figure if I can find someone familiar ...
2
votes
1answer
591 views

How do I bring up an interface on a netscreen router

I took down an interface using set interface ethernet0/0 phy link-down with the intention of cycling it back up - but now I can;'t figure out how to bring it up.
2
votes
3answers
4k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
1
vote
5answers
4k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...