Using DynDNS in Juniper SSG devices

Juniper SSG devices behaviour when configuring dynamic DNS is sometimes frustrating. There is not enough useful information on how to configure on certain circumstances. So I’ll try to give some tips that could help you if you are near to throw in the towel.

Netscreen - DDNS : Last response - not init

 

I've found this article is at http://www.fir3net.com/Juniper-Netscreen/netscreen-ddns-last-response-not-init.html it explains how to resolve the 'not init' issue while attempting to start DynDNS client on a Netscreen

Unattended access to Netscreen devices from vb script

I've found this post at experts-exchange: http://www.experts-exchange.com/Software/Internet_Email/File_Sharing/SSH_Telnet/Q_22920318.html

Here is a VBScript that should do what you are looking for. Just remember your credentials are in plain text in the script, set your permissions accordiningly:

set WshShell = WScript.CreateObject("WScript.Shell")

WshShell.Run "C:\putty HOSTNAME -l LOGIN -pw PASSWORD"      ' put putty in C:\
WScript.Sleep 2000
WshShell.AppActivate "HOSTNAME - PuTTY"      'insert correct hostname
WshShell.SendKeys "command"             'insert dns refresh command
WScript.Sleep 100
WshShell.SendKeys "{ENTER}"
WScript.Sleep 1000
WshShell.SendKeys "exit"
WScript.Sleep 100
WshShell.SendKeys "{ENTER}"
You will need to put putty in you C:\ directory or give it an absolute path

Good Luck

Darkstriker69

Save Netscreen config file from CLI

I've found this deimark's post in experts-exchange that explains how to save the Netscreen's firewall configuration from CLI.

From the webui you can save a copy of the config hen you view it. I would suggest using tftp to do this.

ie set up a tftp server and enter the following commands:
get config > tftp <ip address of tftp server> config-file.txt

Similar to what you would do for backing up and upgrading the screenos image.

Namely to back up:
save config from flash to tftp <ip address of tftp server> <filename>

To upgrade your system:
save config from tftp to flash <ip address of tftp server> <filename> to flash
reset

Junos Router Emulator

I've found this blog: http://blog.okellynet.com/?p=67

There you can find tips for download a Junos Router Emulator for Juniper routers in a VMware virtual machine.

Netscreen How-To

He encontrado una web con bastante documentación sobre netscreen:

http://www.fir3net.com/Firewalls/Juniper-Netscreen/

Cómo reducir el timeout de arp en los firewalls Netscreen/Juniper

Puede haber diferentes razones para querer reducir el timeout de la tabla arp en los firewalls de Netscreen / Juniper.

En mi caso lo utilizo cuando tengo un router principal y otro de backup que se conecta de forma totalmente manual si el primero de ellos falla, ambos con idéntica configuración incluida la IP.

En estos casos el valor por defecto de timeout en la tabla arp de los Juniper es de 600 segundos, lo que hace que si no reinicio el Juniper, tengo que esperar 10 minutos a que la entrada en la tabla arp correspondiente al router se borre para que la conexión a internet funcione.

Esto se puede evitar reduciendo este valor de timeout introduciendo los siguientes comandos desde una sesión ssh o telnet en el firewall:

set arp age 60
save
De esta forma el timeout quedará reducido a sólo 60 segundos.