Clik here to view.
SSG140 VPN access failed with A Phases 2 packet arrived while XAuth was still...
Hi Team, We recently upgraded the internet link. The SSG140 was working fine with old link and VPN access via VPN access Manager.But since we upgraded the link with WAN info (didnt touch any other...
View ArticleClik here to view.
Re: SSG140 Interface 0/9 traffic Bandwidth issue
Thanks Steve, Confirmed with ISP. They configured NTU port as auto negotiate.When I change 0/9 to auto, we can achieve the expected speed which firewall can handle. I also have an issue regards of VPN....
View ArticleRe: SSG-550M Random ARP Drops Log - packet dropped pakQ full 201
I've not seen that error log before. But you can confirm your max arp limits by running. get sys-cfg And see the current usage along with the max on the device at any moment withget arp So if you can...
View ArticleSSG-550M Random ARP Drops Log - packet dropped pakQ full 201
Seem to be hitting strange problem - ARP packets being randomly dropped. Logs from SSG showing the following: packet dropped pakQ full 201 Any ideas, perhaps reaching maximum allowed ARP entries?
View ArticleRe: How to Migrate SSG140 to SRX?
This assumes the radius accounting is on your tac-plus server. And you will need to subsitute the local ip address for the interface in the original configuration.set system authentication-order...
View ArticleHow to Migrate SSG140 to SRX?
SSG config.set auth-server "Local" id 0set auth-server "Local" server-name "Local"set auth-server "SSG" id 1set auth-server "SSG" server-name "10.10.10.10"set auth-server "SSG" account-type admin set...
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
Reverting the interface to the default auto-neg would beset interface eth0/9 phy auto
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
Thanks Steve, Could you please advise what the command for change back to auto if set interface eth0/9 phy full 1000mbdidn't overwrite well in case. So I can rollback?Thanks
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
When you apply these commands it overrides auto-neg and forces the specified speed. This will bounce the interface and reconnect if manual connection is accepted by the partner. If the switch port does...
View ArticleClik here to view.
Re: SSG140 Interface 0/9 traffic Bandwidth issue
Thank for the reply. Would this changes impact the current existing 100M link connected once it is implemented? Are we able to see this changes from GUI without connect to the new 500M link? or CLI...
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
I don't have an SSG with gig interfaces to test but I think this is the command format.set interface eth0/9 phy 1000mb
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
Thanks Steve, Any docs or CLI commands you could provide to reset GE? Am I able to reset/reconfigure it from GUI or CLI only? Please advise, Thanks again.Felix
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
This is not a firmware issue but a negotiation between the SSG and the connected switch. Since your laptop works connecting GE to the port that side is likely configured at GE auto-neg. Check the...
View ArticleRe: Netscreen ScreenOS 6.3.0r26 - How to enable openSSH CTR Ciphers to be...
What I see is that even after upgrade to the latest version I still have OSX complaining about ScreenOS using weak ciphers. I can override this warning and connect anyway. The admin > management...
View ArticleDST Nat without VIP
Hello, Am trying to setup destination NAT on a SSG 350m. Internet -> SSG 350m -> Internal machine 24.12.0.2 -> 192.168.1.1 -> 192.168.1.111 UDP/30200 -> -> UDP/30200 Policy: set...
View ArticleSRX340 Issue to Ping interfaces
Hi,I'm currently working on SRX340 and trying to configure it as following via a static NAT config:10.65.144.65 (untrust area) <--> 10.65.144.66 ge0/0/0.0 | SRX340 | ge0/0/1.0 192.168.235.239...
View ArticleRe: SSG140 Interface 0/9 traffic Bandwidth issue
Thanks for the reply.It means this gig port on SSG140 is not compatible with switch/router installed by ISP?I did test the speed from direct connect to my laptop and it can reach 490/490. Will...
View ArticleRe: Netscreen ScreenOS 6.3.0r26 - How to enable openSSH CTR Ciphers to be...
Oh so you basically just went into your device to verify what you see in the software. Can you share the command you used to bring those up?
View ArticleRe: Netscreen ScreenOS 6.3.0r26 - How to enable openSSH CTR Ciphers to be...
Sorry for the confusion, by download I just meant the ScreenOS software itself. I saw the same as you looking on my SSG line device.
View Article
![Various Artists – Old School / New School [iTunes Plus M4A]](http://i.imgur.com/GEFz815.jpeg)