Questions tagged [screenos]
For questions about or involving the ScreenOS by Juniper Networks, where it is a real-time embedded operating system for the NetScreen range of hardware firewall devices from Juniper Networks.
13
questions
1
vote
2
answers
2k
views
Juniper SSG20, reset to factory default
I have an Juniper SSG20 that I have tried to reset to factory default.
I have tried the pin hole reset method but to no avail, and the serial console doesn't indicate that the procedure is started, ...
- 204
3
votes
2
answers
526
views
Juniper NetScreen NAT from a secondary Untrusted Zone
We have multiple public IP address subnets for various purposes. I need to create an Internal Zone behind NAT that presents itself as having an external IP in External Zone B.
[...
- 282
2
votes
2
answers
2k
views
Is there any reason to have a bridge group with only one interface?
I'm currently in the process of converting a ScreenOS configuration to a JunOS router and am a bit confused by the current configuration of two bridge groups on the old router. It's my understanding ...
- 151
1
vote
1
answer
6k
views
Interface NAT vs Policy based NAT on Juniper SSG ScreenOS
I have inherited a network using a mix of SSG140s, 350M and 550M. Each of them is configured with a Trust, Untrust and VPN VR with multiple custom zones on each (we don't use the default zones).
[...
- 282
15
votes
0
answers
720
views
PIM-SM with BSR over SSG5 VPN tunnel
I've created a lab to troubleshoot an issue I'm having with PIM-SM and BSR. There are two sites connected via two Juniper SSG5s (6.3.0r17) with just enough configuration to focus on the problem at ...
- 389
4
votes
1
answer
4k
views
Juniper SRX100 / Junos - Static Routers between virtual Routers
i am replacing a Juniper SSG5 with Screenos against a SRX100 with Junos (12.1X44-D35.5).
I am replacing a virtual router configuration that Looks like this:
+----...
user8530
1
vote
1
answer
210
views
Report XML of screenos-config
tell me please, who Knows is there xml output of config in screenos. In Junos it achieve by command-- show | display xml .
- 397
3
votes
1
answer
2k
views
next-table may loop
Help me to understand such situation. It is necessary translate a little of config from Screenos to Junos.
Screenos issue:
set vrouter "trust-vr"
set route 217.118.52.149/32 vrouter "TrustGi-vr" ...
- 397
4
votes
1
answer
2k
views
Screen to Junos "Set route ...." command
tell me please how to translate the following Screenos to Junos...
Do I understand correctly that the path to route 80.70.128.142/32 is via vrouter "UntrustGi-vr" ?
Screenos command:
set vrouter "...
- 397
4
votes
1
answer
371
views
ScreenOS: See Peak bandwidth on an Interface and Alarm if it crosses a threshold
I have a Juniper SSG320M running ScreenOS 6.2 (actually 2 of them in an HA active/passive).
I want to measure the bandwidth consumed on one of the interfaces, and throw an alarm if that exceeds a ...
- 225
2
votes
1
answer
1k
views
Juniper Netscreen: OSPF in Untrust zone
I am having a problem setting up OSPF between a Juniper Netscreen SSG5's "Untrust" zone and a Cisco router in a lab environment. The state does not transition past EXSTART until the Netscreen device's ...
- 389
2
votes
0
answers
577
views
How to force route for MIP in screenos, multiple ISP untrust
Scenairo: SSG140 in HA configuration. Four interfaces:
LAN (trust) eth0/0 172.20.0.0./24
ISP1 (untrust) eth0/1 1.1.1.130/28
ISP2 (untrust) eth0/2 2.2.2.194/28
ISP3 (untrust) eth0/3 3.3.3.130/28
...
- 21
8
votes
3
answers
1k
views
Is it possible to block IKE from reaching a Netscreen's control plane?
I have an issue where a Netscreen 25 is being flooded with IKE packets from an unrelated source, which at times is overloading the firewall's processing capacity. I see thousands of log entries ...
- 4,758