The screenos tag has no wiki summary.
1
vote
1answer
157 views
ScreenOS MIP selection for outbound connections
Given a ScreenOS 6.3.0 firewall with this configuration:
unset flow reverse-route clear-text
set interface "ethernet0/0" zone "Trust"
set interface ethernet0/0 ip 192.168.1.1/24
set interface ...
0
votes
2answers
108 views
How to restict telnet from Juniper firewall?
Can telnet everywhere from the appliance without any traffic / event logs. It seems to disregard the global policy we have set for blocking all traffic unless specifically permitted.
0
votes
0answers
8 views
Any way to preserve comments inside ScreenOS conf on Juniper?
As per title. At the moment the comments are accepted for conf loads and manually entered commands but do not get saved to flash.
Perhaps there is a trick or command to "commit" comments?
0
votes
2answers
139 views
Can Juniper SSG be used as DNS recursor?
As per title.
e.g.
1. client asks example.com <--> Juniper_SSG_140
2. Juniper_SSG_140 <--> DNS root servers
3. <--> Specific DNS returned by root server
4. client ...
-2
votes
1answer
91 views
What is the story with 64 reserved address limit on Juniper's DHCP server?
It's a very strange limitation, any way to increase it?
5
votes
1answer
388 views
Juniper SSG20 - Bridge ADSL to ethernet interface
We're trying to reuse some leftover equipment we've got. I've got a Juniper SSG20 with 2x ADSL2/2+ mini-PIMs and we've already got a firewall solution (Which will act as the PPPoE Client) but what we ...
0
votes
1answer
324 views
Juniper ScreenOS Windows 7 Vpn client
I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
0
votes
2answers
908 views
Juniper ScreenOS vlan configuration
Trying to configure my first Juniper firewall, an SSG5 (running 6.2.0r11.0), but having some trouble with the vlans. I haven't found much documentation relating to what I'm trying to do; possibly ...
5
votes
2answers
453 views
ScreenOS ip6in4 tunnel over transport mode ipsec?
I have setup a point to point transport ipsec session between a ScreenOS router (SSG-5) and a Cisco 3925. The ipsec transport itself works great, but as soon as I try to direct the protocol 41 ...
1
vote
1answer
3k views
How can I expire non-active sessions on my Netscreen SSG140?
I have a Juniper Netscreen SSG-140.
While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
0
votes
1answer
291 views
Cisco Catalyst 3550, ScreenOS, IOS Fundamentals, Juniper ssg5 NetScreen vlan
i have two vlans configured into a juniper netscreen (a screenOS device).
I have connected a catalyst to the nic i have configured the vlans on. I need an example configuration to shoot into the cisco ...
1
vote
0answers
933 views
OpenVPN & Juniper SSG-140
I asked this question over on some Juniper Forums but they seem to be pretty dead as in over a week it hasn't had that many hits and no one has had any advice. I figure if I can find someone familiar ...
2
votes
1answer
591 views
How do I bring up an interface on a netscreen router
I took down an interface using
set interface ethernet0/0 phy link-down
with the intention of cycling it back up - but now I can;'t figure out how to bring it up.
2
votes
3answers
4k views
Easily obtain list of sessions from Juniper Netscreen
I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
1
vote
5answers
4k views
How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?
I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable.
Anyone know what command I skipped on CLI for ...