ScreenOS Firewalls (NOT SRX)
Reply
New User
Tyzlor
Posts: 1
Registered: ‎05-21-2009
0

Config issues from NS50 to SSG140

Hi All

 

I have recently upgraded a pair of NS50 Firewalls to SSG140s everything went great however the LAN2LAN VPNs from all sites did not work, when I was configuring the pair of SSGs I "cut and pasted" the VPN config into the command line on the SSG.

 

I am thinking now that this is causing the issues though on some of the VPNs - it is also failing on phase two and is quite random.

 

Do you think it would be best to not use legacy config and start everything from scratch ?

I will have to contact a few other vendors to change their configs which is a right pain ...

 

Thanks

 

--M--

Trusted Expert Trusted Expert
Trusted Expert
WL
Posts: 789
Registered: ‎07-26-2008
0

Re: Config issues from NS50 to SSG140

If there were some issue with the keys, I dont think the vpn would come up at all. Could you show us the "get event" when the vpn went down?

That will give us a better idea of what was going on.

 

 

****pls click the button " Accept as Solution" if my post helped to solve your problem****
Super Contributor
arizvi
Posts: 287
Registered: ‎10-21-2008
0

Re: Config issues from NS50 to SSG140

Hi,

 

What firmware you were running in NS50 and what firmware are you running in SSG140 ?

The only difference is just about the interfaces and SSG has Bgroups.

Please provide the

1) get ike coo

2) get sa

3) get event

 

Then we oeuld have better understanding of the problem

 

Thanks

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.