Management
Reply
Contributor
kwemy01
Posts: 13
Registered: ‎12-17-2010
0

Unable to update SSG5 with NSM. NSM wants to unset the used interface first.

Hi

 

I have 2 SSG5 firewalls running ver 6.2.0.11 Initial command line set up configured bgroup1 for untrust on eth0/0 and eth0/1. Bgroup0 (trust) on eth0/3-4-5.

 

I have configured the exact same details on to NSM. I have the firewall on a remote site and deplyed changes to the firewall. The firewall takes changes but not all. I have tried to push dhcp relay and other changes to bgroup0 (trust) but none of these changes take place. I have no changes configured for bgroup1 (untrust) but when running a delta-config the first thing NSM try's to push to the firewall is..

 

 unset interface bgroup0 ip
  unset interface bgroup1 ip
  set interface bgroup0 ip xx.x.xx.x/xx
  set interface bgroup0 nat
  set interface bgroup0 dhcp relay vpn
  set interface bgroup0 dhcp relay server-name xx.x.xx.xxx
  set interface bgroup0 dhcp relay service
  set interface bgroup0 protocol ospf area 0.0.0.0
  set interface bgroup0 protocol ospf enable
  set interface bgroup0 protocol ospf cost 5
  set interface bgroup0 protocol ospf retransmit-interval 5
  set interface bgroup1 ip xx.xxx.xxx.xxx/xx
  set interface bgroup1 route

 

 

It try's to unset the interfaces first although the config on both are the same. It will of course not unset bgroup1 as that is the interface i am using to connect with NSR.

 

Has anybody experiences this sort of issue? I'd really appreciate some feedback.

 

Many thanks

Kevin

Kevin
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.