Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [screenos]

For questions about or involving the ScreenOS by Juniper Networks, where it is a real-time embedded operating system for the NetScreen range of hardware firewall devices from Juniper Networks.

2
votes
1answer
279 views

Juniper NetScreen NAT from a secondary Untrusted Zone

We have multiple public IP address subnets for various purposes. I need to create an Internal Zone behind NAT that presents itself as having an external IP in External Zone B. [...
2
votes
2answers
976 views

Is there any reason to have a bridge group with only one interface?

I'm currently in the process of converting a ScreenOS configuration to a JunOS router and am a bit confused by the current configuration of two bridge groups on the old router. It's my understanding ...
1
vote
1answer
4k views

Interface NAT vs Policy based NAT on Juniper SSG ScreenOS

I have inherited a network using a mix of SSG140s, 350M and 550M. Each of them is configured with a Trust, Untrust and VPN VR with multiple custom zones on each (we don't use the default zones). [...
9
votes
0answers
511 views

PIM-SM with BSR over SSG5 VPN tunnel

I've created a lab to troubleshoot an issue I'm having with PIM-SM and BSR. There are two sites connected via two Juniper SSG5s (6.3.0r17) with just enough configuration to focus on the problem at ...
3
votes
1answer
4k views

Juniper SRX100 / Junos - Static Routers between virtual Routers

i am replacing a Juniper SSG5 with Screenos against a SRX100 with Junos (12.1X44-D35.5). I am replacing a virtual router configuration that Looks like this: +----...
1
vote
1answer
138 views

Report XML of screenos-config

tell me please, who Knows is there xml output of config in screenos. In Junos it achieve by command-- show | display xml .
2
votes
1answer
1k views

next-table may loop

Help me to understand such situation. It is necessary translate a little of config from Screenos to Junos. Screenos issue: set vrouter "trust-vr" set route 217.118.52.149/32 vrouter "TrustGi-vr" ...
4
votes
1answer
2k views

Screen to Junos “Set route …” command

tell me please how to translate the following Screenos to Junos... Do I understand correctly that the path to route 80.70.128.142/32 is via vrouter "UntrustGi-vr" ? Screenos command: set vrouter "...
4
votes
1answer
323 views

ScreenOS: See Peak bandwidth on an Interface and Alarm if it crosses a threshold

I have a Juniper SSG320M running ScreenOS 6.2 (actually 2 of them in an HA active/passive). I want to measure the bandwidth consumed on one of the interfaces, and throw an alarm if that exceeds a ...
2
votes
1answer
1k views

Juniper Netscreen: OSPF in Untrust zone

I am having a problem setting up OSPF between a Juniper Netscreen SSG5's "Untrust" zone and a Cisco router in a lab environment. The state does not transition past EXSTART until the Netscreen device's ...
2
votes
0answers
538 views

How to force route for MIP in screenos, multiple ISP untrust

Scenairo: SSG140 in HA configuration. Four interfaces: LAN (trust) eth0/0 172.20.0.0./24 ISP1 (untrust) eth0/1 1.1.1.130/28 ISP2 (untrust) eth0/2 2.2.2.194/28 ISP3 (untrust) eth0/3 3.3.3.130/28 ...
8
votes
3answers
876 views

Is it possible to block IKE from reaching a Netscreen's control plane?

I have an issue where a Netscreen 25 is being flooded with IKE packets from an unrelated source, which at times is overloading the firewall's processing capacity. I see thousands of log entries ...