ScreenOS Firewalls (NOT SRX)
Reply
Visitor
agk.pandey@gmail.com
Posts: 8
Registered: ‎02-15-2011
0

Re: JNCIA-FWV Material

Thanks for this link. I seen the contents but I felt that does this book covers whole JNCIS exam ?

just wanted to confirm once otherwise book is very up to the point.

 

 

Regards

Ajay.

Visitor
Shishodia
Posts: 4
Registered: ‎04-27-2011
0

Re: Troubleshooting Tips - Debug commands

Just to add on: Make sure to Turn ON the dbuf buffer.

 

This sets up a portion of memory required to hold the debug information needed. When troubleshooting the firewall, the output of the debug will be directed either to the console or to a buffer. Usually, the debugging information should go to the buffer, opposed to the console. When information is sent to the console, it is resource intensive, and can produce performance problems if too much debugging information is sent to the console. The alternative is sending the data to a buffer called dbuf.

From the command line interface (CLI): set console dbuf

 

I recently faced a problem, where someone is deubgging the packets to the self and due the large dbuf stream entry, it slowed the firewall and caused issues.

Independent Juniper Professional Services Consultant
JNCIS (SEC/ER/FWV), JNSS(Adv. Security), X-JTAC
Contributor
MichAda
Posts: 22
Registered: ‎04-21-2009
0

Re: Troubleshooting Tips - Debug commands

Nice write up and additional comments!

 

Would love to see more regarding how to interpret the output.

Visitor
microabc
Posts: 1
Registered: ‎01-06-2013
0

Re: Troubleshooting Tips - Debug commands

thanks

 

 

Visitor
noobies
Posts: 7
Registered: ‎07-25-2013
0

Re: Troubleshooting Tips - Debug commands

Hi, would like to ask a question, when I tried to use the debug commands, after the db st, I got a series of install v6 vector flow sentences, may I know what is that?
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.