Questions tagged [netscreen]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
246 views

Juniper Netscreen email alert SSG-550M

I'm having some problems configuring email alerts on Netscreen 6.3r22 on 2 SSG-550M in an NSRP group active/active. I'm aware that there are limitations of sending SMTP alerts via mail servers ...
dcos's user avatar
  • 143
3 votes
1 answer
532 views

VLAN isolation failure with HP Procurve, Juniper Netscreen

I'm having problems with hosts being able to ping other hosts they shouldn't be able to communicate with. Fairly simple network - relevant hardware: HP Procurve 2810-24G switch Juniper Netscreen 208 ...
Phil K's user avatar
  • 61
-1 votes
1 answer
3k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
Dave Holland's user avatar
  • 1,908
2 votes
1 answer
222 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
the-wabbit's user avatar
  • 40.8k
0 votes
1 answer
419 views

Juniper Netscreen Remote - What is the interface / route config?

I'm wondering whether someone can tell me the mechanism by which traffic is routed to my office network via a VPN connection? Once I understand that I will hopefully be able to sort out the issues I ...
Paulioliolio's user avatar
1 vote
1 answer
864 views

ScreenOS MIP selection for outbound connections

Given a ScreenOS 6.3.0 firewall with this configuration: unset flow reverse-route clear-text set interface "ethernet0/0" zone "Trust" set interface ethernet0/0 ip 192.168.1.1/24 set interface ...
David Mackintosh's user avatar
3 votes
1 answer
9k views

Cisco 3750 native vlan VLAN1 doesn't work in a Trunked configuration

I have two devices here, a Netscreen SSG520 and a Cisco 3750. #show ver Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2007 by ...
David Mackintosh's user avatar
1 vote
1 answer
12k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
David Mackintosh's user avatar
1 vote
1 answer
502 views

Net Screen Remote RDP not working but vpn is

I have a problem regarding a connection with Netscreen-remote. First of all, to install the program I had to create a VM of XP x32b because of compatibility issues. Once it is installed, I imported ...
Azshlanar's user avatar
1 vote
1 answer
2k views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
Adam Brand's user avatar
  • 6,147
2 votes
5 answers
3k views

Juniper NetScreen NS-5GT traffic monitoring

I've done casual research into the subject and am truly dismayed at the lack of compatible tools for such a simple task. Maybe someone can provide assistance. We have a NetScreen NS-5GT in the office....
user avatar
1 vote
1 answer
906 views

Routing for IPSec tunnel

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
user avatar
1 vote
2 answers
1k views

Netscreen-Remote Equivalent On Linux

We're running a simple Juniper VPN tunnel (using Juniper SSG5's) for outside-network access, which works great for Windows PCs since they can connect using the supplied Netscreen-Remote VPN client. ...
Mojah's user avatar
  • 886
1 vote
1 answer
189 views

Net Screen manager setup

I'm having an issue with our NSMExpress box. I'm trying to manage all our devices, range from ns5gt to ssg320m, and some of those devices have addresses assigned by dhcp from the ISP (like pppoe or ...
Codezy's user avatar
  • 103
3 votes
6 answers
14k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX VPN]http://www.cisco.com/en/US/tech/tk583/tk372/...
elint's user avatar
  • 82
3 votes
1 answer
3k views

How do I bring up an interface on a netscreen router

I took down an interface using set interface ethernet0/0 phy link-down with the intention of cycling it back up - but now I can;'t figure out how to bring it up.
jwoolard's user avatar
  • 145
1 vote
3 answers
3k views

Light packet loss through router

I just recently got a fiber line installed into my office, and with the exception of an odd bit of trouble that we're having, things are working good, and the network response is really amazing. The ...
Matt Simmons's user avatar
  • 20.5k
2 votes
3 answers
12k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
Matt Simmons's user avatar
  • 20.5k
-1 votes
1 answer
2k views

How to quickly and easily set up and maintain VPN's ? (Have Juniper SSG-140) [closed]

We have an SSG-140 by Juniper (similar to a netscreen 25, just a newer version of ScreenOS and more physical ports). I find setting up new VPN profiles to be a PITA. I have to follow a bunch of steps,...
Jonesome Reinstate Monica's user avatar
0 votes
1 answer
914 views

Wildcard Domain on Juniper Netscreen

On a Juniper Netscreen firewall, is there a character that can be used as a wildcard with a domain? For example, under the Objects -> Addresses section, if I want to create a new object similar to *....
kingfish's user avatar
  • 410
0 votes
1 answer
2k views

Netscreen-25 : Cannot forward port 443 to an internal server?

A customer is using a NetScreen-25 firewall. By default it has a web interface on port 80 and 443. I've changed the port for the HTTPS web interface to some other number that is not being used and ...
TimothyP's user avatar
  • 299
1 vote
6 answers
29k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
gravyface's user avatar
  • 14k
2 votes
3 answers
835 views

What's the best tool for usage reporting on a NetScreen Firewall?

Anyone got a good product for Usage Reporting for a NetScreen Firewall. I went looking for Webtrends Firewall Suite but it appears to have disappeared into the NetIQ product line up. I am going to ...
Rob Bergin's user avatar
2 votes
5 answers
8k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...
sclarson's user avatar
  • 3,684