Re: SSG 520

View: New views
6 Messages — Rating Filter:   Alert me  

Re: SSG 520

by Peter E. Fry :: Rate this Message:

Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message

[...Regarding the SSG 550...]
>   It's a tad disappointing that Juniper chose not to use ECC RAM,
> especially in a Socket T device in 2006.  Looks like a 915 chipset,
> but I don't have the PCI IDs to compare to be certain (I didn't see
> them offhand on Intel's site) (nor did I care to pull heat sinks and
> look...). [...]

  I got the chipset wrong -- looking at it again with a more complete
PCI ID guide, it's an E7221.  (Also, JunOS boot messages indicate
that it's an E7221 as well, but JunOS refuses to start.)  Odder
still, it may actually support ECC, but it's tough (for me) to tell
for certain.  With non-ECC RAM, it makes little difference.
  Oh, and ScreenOS doesn't like >2GB of RAM.

Peter E. Fry

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

NS 208 question

by Jacob-20 :: Rate this Message:

Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message

I am playing with a netscreen 208 and I have a question.

I erase the configs and start fresh.

>From the CLI, I do the following (following C&E PDF)...

set admin sys-ip 0.0.0.0
set int e1 zone trust
set int e1 ip 172.16.229.1 255.255.255.0
eet int e1 NAT
set int e3 zone untrust
set int e3 ip 111.111.111.254 255.255.255.0
set policy from trust to untrust any any any permit
save

>From the CLI, I can not ping 172.16.229.1.

I plug a cross over cable from e1 to a pc with the ip address 172.16.229.2,
I can not ping both ways.

Ping in enabled on e1.

But, I can ping 111.111.111.1 from the CLI, the next hop from e3.

What am I missing???

Thanks
Jacob


_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

Re: NS 208 question

by Eric Sorenson :: Rate this Message:

Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message

On Thu, 15 Mar 2007, Jacob wrote:

>
> >From the CLI, I can not ping 172.16.229.1.
>
> What am I missing???

set int e1 manage ping

?

--
 - Eric Sorenson - N37 17.255 W121 55.738  - http://ahpook.vox.com/   -
 - Personal colo with a professional touch - http://www.explosive.net -
_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

Re: NS 208 question

by Jacob-20 :: Rate this Message:

Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message

Ping is enable

Get int e1:

Interface ethernet1:
  number 0, mode nat, up/full-duplex, zone Trust
  vr trust-vr
  ip 172.16.229.1/24  mac 0010.db19.a090
  manage ip 172.16.229.1 mac 0010.db19.a090
  ping enabled, telnet enabled, SCS enabled, SNMP enabled
  web enabled, ident-reset disabled, SSL enabled
  bandwidth: physical 100000kbps, configured 0kbps, current 0kbps
             total configured gbw 0kbps, total allocated gbw 0kbps

-----Original Message-----
From: Eric Sorenson [mailto:eric@...]
Sent: Thursday, March 15, 2007 10:50 AM
To: Jacob
Cc: nn@...
Subject: Re: [nn] NS 208 question

On Thu, 15 Mar 2007, Jacob wrote:

>
> >From the CLI, I can not ping 172.16.229.1.
>
> What am I missing???

set int e1 manage ping

?

--
 - Eric Sorenson - N37 17.255 W121 55.738  - http://ahpook.vox.com/   -
 - Personal colo with a professional touch - http://www.explosive.net -

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

Re: NS 208 question

by Jacob-20 :: Rate this Message:

Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message

If I give e1 an manage-ip of 172.16.229.254, I can ping 172.16.229.254.

When I go to IE to log in using 172.16.229.254, I am asked for the username
and password. After I enter them, I get an 404 page.

-----Original Message-----
From: nn-bounces@... [mailto:nn-bounces@...] On Behalf Of
Jacob
Sent: Thursday, March 15, 2007 1:05 PM
To: 'Eric Sorenson'
Cc: nn@...
Subject: Re: [nn] NS 208 question

Ping is enable

Get int e1:

Interface ethernet1:
  number 0, mode nat, up/full-duplex, zone Trust
  vr trust-vr
  ip 172.16.229.1/24  mac 0010.db19.a090
  manage ip 172.16.229.1 mac 0010.db19.a090
  ping enabled, telnet enabled, SCS enabled, SNMP enabled
  web enabled, ident-reset disabled, SSL enabled
  bandwidth: physical 100000kbps, configured 0kbps, current 0kbps
             total configured gbw 0kbps, total allocated gbw 0kbps

-----Original Message-----
From: Eric Sorenson [mailto:eric@...]
Sent: Thursday, March 15, 2007 10:50 AM
To: Jacob
Cc: nn@...
Subject: Re: [nn] NS 208 question

On Thu, 15 Mar 2007, Jacob wrote:

>
> >From the CLI, I can not ping 172.16.229.1.
>
> What am I missing???

set int e1 manage ping

?

--
 - Eric Sorenson - N37 17.255 W121 55.738  - http://ahpook.vox.com/   -
 - Personal colo with a professional touch - http://www.explosive.net -

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

Re: NS 208 question

by Jacob-20 :: Rate this Message:

Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message

Well... after resetting every switch, laptop, and NS 208.. I can go out the
firewall and manage it with 172.16.229.254.

Still can not ping 172.16.229.1 though, or the interface on the e3, the
untrusted interface.

O well...

-----Original Message-----
From: nn-bounces@... [mailto:nn-bounces@...] On Behalf Of
Jacob
Sent: Thursday, March 15, 2007 1:37 PM
To: nn@...
Subject: Re: [nn] NS 208 question

If I give e1 an manage-ip of 172.16.229.254, I can ping 172.16.229.254.

When I go to IE to log in using 172.16.229.254, I am asked for the username
and password. After I enter them, I get an 404 page.

-----Original Message-----
From: nn-bounces@... [mailto:nn-bounces@...] On Behalf Of
Jacob
Sent: Thursday, March 15, 2007 1:05 PM
To: 'Eric Sorenson'
Cc: nn@...
Subject: Re: [nn] NS 208 question

Ping is enable

Get int e1:

Interface ethernet1:
  number 0, mode nat, up/full-duplex, zone Trust
  vr trust-vr
  ip 172.16.229.1/24  mac 0010.db19.a090
  manage ip 172.16.229.1 mac 0010.db19.a090
  ping enabled, telnet enabled, SCS enabled, SNMP enabled
  web enabled, ident-reset disabled, SSL enabled
  bandwidth: physical 100000kbps, configured 0kbps, current 0kbps
             total configured gbw 0kbps, total allocated gbw 0kbps

-----Original Message-----
From: Eric Sorenson [mailto:eric@...]
Sent: Thursday, March 15, 2007 10:50 AM
To: Jacob
Cc: nn@...
Subject: Re: [nn] NS 208 question

On Thu, 15 Mar 2007, Jacob wrote:

>
> >From the CLI, I can not ping 172.16.229.1.
>
> What am I missing???

set int e1 manage ping

?

--
 - Eric Sorenson - N37 17.255 W121 55.738  - http://ahpook.vox.com/   -
 - Personal colo with a professional touch - http://www.explosive.net -

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn

_______________________________________________
nn mailing list
nn@...
http://qorbit.net/mailman/listinfo/nn
LightInTheBox - Buy quality products at wholesale price