Re: I cant access to my devise Juniper SSG5
sir i have problem in ssg5 .all ports up &show no connectivity.any solution?
View Articleauto failover on ssg350 clustered(NSRP enabled)
Hello Dears, im trying to configure redundent links, auto failover between two sites( one site has Juniper SSG350 and the other site has Cisco ASA). below are the details of the current setup:Cisco...
View Articleconfiguring two subnets towards the same destination with different routes
Hello Dears, i have created to two Route Based VPNs (using two ISPs) on my SSG350 towards Cisco ASA,in my LAN(connected to SSG350)i have two sunbets( 10.123.236.0 and 10.123.237.0)on the remote site (...
View ArticleBasic BGP Configuration
I currently have a NSRP configuration w/ the ISP providing a handoff w/ a static ip address and a default route pointing to the carrier equipment. The carrier has advised that they will be moving this...
View ArticleRe: auto failover on ssg350 clustered(NSRP enabled)
When you setup your routing for the two tunnels have the static routes for the primary tunnel prefered over the secondary. On the Primary VPN phase two configuration advanced tab, enable VPN monitor...
View ArticleRe: configuring two subnets towards the same destination with different routes
On the Cisco side you will use the "interesting traffic" ACL on each tunnel to insure that the return traffic goes to the correct source. These create the pair of source and destination address you...
View ArticleRe: Basic BGP Configuration
Yes, that is all that is needed for a basic peering session. This is the document that will help find the issue if the session does not come up. [ScreenOS] How to troubleshoot BGP...
View ArticleRe: Questions about the basic route settings(SSG-350M)
Hi, As Rseibert has already mentioned, the first one is a static route. It will be seen in the config if you use the command 'get config | i route'. It can be 'deleted' fro mthe WebUI as well. The...
View ArticleRe: configuring two subnets towards the same destination with different routes
Hi, The requirement is not clear. Do you want to route traffic from 10.123.236.0 to 10.123.245.0 via tun.1, while sending 10.123.237.0 to 10.123.245.0 via tun.2 ? If that is the case, you will first...
View ArticleRe: configuring two subnets towards the same destination with different routes
thanks for your reply, i tried to configure PBR but the issue is that the traffic will not be routed unless i added a route like below10.123.245.0/24 interface0/1SP201Root int0/1 which has the PBR...
View ArticleRe: configuring two subnets towards the same destination with different routes
thanks for you reply dear... do you mean that at juniper side, what i need is just to add the routes like below :10.123.245.0/24 tunnel.1SP201Root 10.123.245.0/24 tunnel.2SP201Root and after...
View ArticleRe: configuring two subnets towards the same destination with different routes
do you mean that at juniper side, what i need is just to add the routes like below : 10.123.245.0/24 tunnel.1 SP 20 1 Root 10.123.245.0/24 tunnel.2 SP 20 1 Root and after configuring the interesting...
View ArticleMTU configuration for lan to lan VPN
Hello, I was reading the topics regarding how to troubleshoot MTU problems, and I would like to ask for a direction about this.I`m using a SSG140 to establish lan to lan VPN with customers (several...
View ArticleRe: MTU configuration for lan to lan VPN
Hello, It is a good idea to set TCP-MSS value for all the TCP traffic going through VPN which can avoid fragmentation. set flow all-tcp-mss - applies MSS to all clear text traffic which includes...
View ArticleRe: auto failover on ssg350 clustered(NSRP enabled)
Hello, If you are using NSRP with vsd-group 0 then you can configure 'interface track-ip' using following link: https://kb.juniper.net/InfoCenter/index?page=content&id=KB21624&actp=search You...
View ArticleWhat is the real memory allocated on ISG1000
Hello all,I suffer from whether it is correct memory?Please see below verification.-----------------------------------------------------------nsisg1000-> get systemProduct Name:...
View ArticleRe: What is the real memory allocated on ISG1000
Hello, The 'get system' output shows the total memory available, i.e. the actual physical memory on the device. The 'get mem' output does not add up to the total memory displayed by the "get system"...
View ArticleRe: auto failover on ssg350 clustered(NSRP enabled)
VPN monitor works for me, ill check your solution for future configurations... thanks alot.
View Article