ScreenOS Firewalls (NOT SRX)
Reply
Visitor
anugroho
Posts: 5
Registered: ‎09-06-2008
0

Need Help: IOS Conversion

Hi...

Actually I'm new in netscreen. Is there anybody here wanna help me to convert the below cisco ios to netscreen config? Because I have SSG5, and I wanna try to use it, by replacing my existing cisco 2600.

Your help really appreciate it. many thanks 

 

crypto isakmp policy 1

 encr 3des
 authentication pre-share
 group 2
 lifetime 43200
crypto isakmp key cisco address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set BM-TRANSFORM esp-3des esp-sha-hmac
 mode transport
crypto ipsec df-bit clear
!
crypto ipsec profile VPN-PROF
 set transform-set BM-TRANSFORM 

!

interface Tunnel1
 bandwidth 64
 ip address 10.0.2.3 255.255.255.0
 no ip redirects
 ip mtu 1400
 ip nhrp authentication cisco
 ip nhrp map multicast 10.204.20.111
 ip nhrp map 10.0.2.1 10.204.20.111
 ip nhrp network-id 100001
 ip nhrp holdtime 600
 ip nhrp nhs 10.0.2.1
 ip tcp adjust-mss 1360
 delay 1000
 tunnel source Loopback2
 tunnel mode gre multipoint
 tunnel key 100001
 tunnel protection ipsec profile VPN-PROF

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.