Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
68 views

ScreenOS Failover tunnel

I have a route-based vpn from my site (Netscreen204) to a customer site (Fortinet) . They want a second, backup tunnel in case of failure, and will be using the Fortune there too. The only thing I ...
0
votes
0answers
26 views

Remote Setup and Configuration of SSG20

I have been asked to configure a VPN from a Netscreen SSG20 to a remote location. The SSG20, however is also in a remote location. I assume that the various guides and manuals will be sufficient to ...
2
votes
1answer
98 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
1
vote
1answer
340 views

ScreenOS MIP selection for outbound connections

Given a ScreenOS 6.3.0 firewall with this configuration: unset flow reverse-route clear-text set interface "ethernet0/0" zone "Trust" set interface ethernet0/0 ip 192.168.1.1/24 set interface ...
0
votes
2answers
184 views

How to restict telnet from Juniper firewall?

Can telnet everywhere from the appliance without any traffic / event logs. It seems to disregard the global policy we have set for blocking all traffic unless specifically permitted.
0
votes
2answers
666 views

Can Juniper SSG be used as DNS recursor?

As per title. e.g. 1. client asks example.com <--> Juniper_SSG_140 2. Juniper_SSG_140 <--> DNS root servers 3. <--> Specific DNS returned by root server 4. client ...
-3
votes
1answer
158 views

What is the story with 64 reserved address limit on Juniper's DHCP server?

It's a very strange limitation, any way to increase it?
5
votes
1answer
590 views

Juniper SSG20 - Bridge ADSL to ethernet interface

We're trying to reuse some leftover equipment we've got. I've got a Juniper SSG20 with 2x ADSL2/2+ mini-PIMs and we've already got a firewall solution (Which will act as the PPPoE Client) but what we ...
0
votes
1answer
590 views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
0
votes
2answers
2k views

Juniper ScreenOS vlan configuration

Trying to configure my first Juniper firewall, an SSG5 (running 6.2.0r11.0), but having some trouble with the vlans. I haven't found much documentation relating to what I'm trying to do; possibly ...
5
votes
2answers
571 views

ScreenOS ip6in4 tunnel over transport mode ipsec?

I have setup a point to point transport ipsec session between a ScreenOS router (SSG-5) and a Cisco 3925. The ipsec transport itself works great, but as soon as I try to direct the protocol 41 ...
1
vote
1answer
6k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
0
votes
1answer
320 views

Cisco Catalyst 3550, ScreenOS, IOS Fundamentals, Juniper ssg5 NetScreen vlan

i have two vlans configured into a juniper netscreen (a screenOS device). I have connected a catalyst to the nic i have configured the vlans on. I need an example configuration to shoot into the cisco ...
1
vote
0answers
1k views

OpenVPN & Juniper SSG-140

I asked this question over on some Juniper Forums but they seem to be pretty dead as in over a week it hasn't had that many hits and no one has had any advice. I figure if I can find someone familiar ...
2
votes
1answer
881 views

How do I bring up an interface on a netscreen router

I took down an interface using set interface ethernet0/0 phy link-down with the intention of cycling it back up - but now I can;'t figure out how to bring it up.
2
votes
3answers
7k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
2
votes
5answers
5k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...