SSG 550 Simple HA Active/Passive configuration. Both servers want to be...
I just finished configuring 2 SSG 550 in HA (Active/Passive). Very simple configuration using 2 ports for HA monitoring the LAN and WAN ports. No weight parameters and such. Synchronization of RTOs...
View ArticleSSG 140 - NAT hairpinning configuraiton
Hi Experts, I am new to SSG devices. Wanted your help for NAT hairpinning configuration of SSG 140.I was referring a following KB which was for SRX....
View ArticleMIP or VIP or DIP? How can I realize the following scenario?
I want to create a testlab. For that I will bring up two ESXi-Hosts and clone important machines (like our DC) onto them. I want the network configuration of my testlab to be exactly the same as my...
View ArticleSSG520m cannot boot after reset due to authentication failed
When trying to do a firmware upgrade, the firewall stuck and hangs while uploading the new image from usb.We reboot the firewall and after that cannot boot any more with not authinticated message. we...
View ArticleDNS A/AAAA no response from Proxy
Hi Folks,My Google foo is obviously lacking as I can find a few references to my problem but no fix. Hopefully someone here will know the answer.I have just installed an SSG-140 in my home lab,...
View ArticleHow to Block specific internal IP address.
Hello Could someone explain how to block specific internal ip address on Juniper ssg 550 m , web filtering works fine but blocking through the "Policy > Policy Elements > Untrust " doesn't...
View ArticleSSG520m DC power supply
Hello, Kindly I want to power up my juniper firewall but the power supply is DC and not AC, there are two terminals first is RTN and the second is -48VAnyone know how I can connect power to this power...
View ArticleNetscreen MIP - nat exempt
Hello, If you configure a MIP on a netscreen. Is there any way to also override the 1 to 1 nat for specific policies? Thanks
View ArticleAutomatic Backup
How Can I create an automatic backup in ScreenOS without using an script?
View Article5gt elastix SIP
Hi everybody We are configuring Juniper Netscreen 5GT to allow VoIP traffic via elastix PBX The Elastix PBX has local address 192.168.1.8, which I associated with its external IP, a.b.c.d by way of a...
View Article2 WAN IPs on SSG140 - best setup for KVM?
Hello, i am preparing a SSG140 for production use - at the moment i got from our ISP the information (IPs for example): WAN IP: 1.1.1.164/28 DNS IPs and Def. Gateway 1.1.1.160plus an own Subnet with...
View ArticlePossible to route traffic over VPN and public interface (same destination IPs)
Is it possible to configure the SSG FW to route traffic over the vpn tunnel and public interface from the same source ip subnet going to the same destination IPs for both the vpn tunnel and the public...
View ArticleSSG 5
I need help,I already read the SSG5 cli guide, but i can't find.I need a command to SSG5 equivalent to command "show configuration" like another firewalls,to see the policies installed.
View ArticleSSG140 - Two interfaces same external IP Range. Apply firewall rules to traffic.
Hi, we have a unused SSG140 on our datacenter. Without SSG140 we are working actually.Datacenter give us two ranges 200.x.x.x/24 and 100.x.x.x/24 and two gateways 200.x.x.1 and 100.x.x.1 on same...
View ArticleRemove Parant Interface IP
Hello,I would like to remove ethernet0/3 IP - 133.133.233.233 of my running SSG which is running 6.3.0 now-----set interface ethernet0/3 ip 133.133.233.233/28set interface ethernet0/3 routeset...
View ArticleClik here to view.
Site-to-site policy-based VPN between Juniper GT5 and Cisco 841
I'm trying to create policy-based VPN connection between Cisco 841 and Netscreen-GT5, but IKE Phase-1 protpcol is not finished at GT5 side. GT5 log:## 2018-01-12 17:35:58 : IKE<39.110.248.241>...
View Article[Juniper SSG-140] - VPN client to site for iOS (Iphone,Ipad)
Hi Everybody,Curently, I try to create VPN client to site on my Ipad to firewall juniper SSG-140 . But NCP secure application can not operate on this case . NCP only run on SRX serial or higher . Could...
View ArticleSSG5 - printing from wired bgroup0 to wireless printer on wireless0/0
My SSG5 is using a mostly default setup using wizard. I have bgroup0 and wireless0/0. Both are in Trust zone. I cannot ping printer in wireless0/0 (and of course can't print to it). bgroup0 network is...
View Articleabout NetScreen-204 firmware
Hello everyone: Who can provide a download link about ScreenOS 5.4 (NS 204) firmware, thanks.
View Articleset admin auth remote unknown keyword remote
I'd like to be able to log into the web portal with admin permissions, but when I connect to the console and try the command: set admin auth remote It returns unknown keyword remote. the documentation...
View Article