ScreenOS Firewalls (NOT SRX)
Reply
Contributor
link2ali
Posts: 104
Registered: ‎06-19-2009
0

Migration - NS5GT to SSG20

Hi,

 

We need to migrate our NS5GT to SSG 20. What would be the most simplest way to migrate the existing configuration and port the same on our new device ?

 

Please help on the above.

 

Distinguished Expert
firewall72
Posts: 811
Registered: ‎05-04-2008
0

Re: Migration - NS5GT to SSG20

Hi,

 

I would take the following action.

 

- Save a copy of the NS5GT config

- Save a copy of the default SSG20 config

- Map out which interfaces you want to use in the SSG20

- Open the 5GT config using Wordpad, do a Find and Replace for the interface changes (i.e. find trust, replace with bgroup0) for each interface

- Check the config for accuracy and save

- TFTP the config over to the SSG20, reset and test

- if needed, you can wipe the 20 by logging into the device using the serial number for username and password

 

I've taken this approach with high levels of success for NS-25 to SSG-140/320's. 

 

-John

John Judge
JNCIS-SEC, JNCIS-ENT, JNCIA-JUNOS, JNSS-Firewall

If this solves your problem, please mark this post as "Accepted Solution". Kudos are appreciated.
Contributor
link2ali
Posts: 104
Registered: ‎06-19-2009
0

Re: Migration - NS5GT to SSG20

 Hello John,

 

Thanks for your reply.

 

Will the steps outlined by you also migrate settings in terms of VPN,DMZ and Security Policies configs ?

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.