ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Re: JNCIA-FWV Material

03.08.11   |  
‎03-08-2011 08:44 PM

Thanks for this link. I seen the contents but I felt that does this book covers whole JNCIS exam ?

just wanted to confirm once otherwise book is very up to the point.

 

 

Regards

Ajay.

ScreenOS Firewalls (NOT SRX)

Re: Troubleshooting Tips - Debug commands

04.27.11   |  
‎04-27-2011 08:41 AM

Just to add on: Make sure to Turn ON the dbuf buffer.

 

This sets up a portion of memory required to hold the debug information needed. When troubleshooting the firewall, the output of the debug will be directed either to the console or to a buffer. Usually, the debugging information should go to the buffer, opposed to the console. When information is sent to the console, it is resource intensive, and can produce performance problems if too much debugging information is sent to the console. The alternative is sending the data to a buffer called dbuf.

From the command line interface (CLI): set console dbuf

 

I recently faced a problem, where someone is deubgging the packets to the self and due the large dbuf stream entry, it slowed the firewall and caused issues.

Independent Juniper Professional Services Consultant
JNCIS (SEC/ER/FWV), JNSS(Adv. Security), X-JTAC
ScreenOS Firewalls (NOT SRX)

Re: Troubleshooting Tips - Debug commands

10.10.11   |  
‎10-10-2011 07:45 AM

Nice write up and additional comments!

 

Would love to see more regarding how to interpret the output.

ScreenOS Firewalls (NOT SRX)

Re: Troubleshooting Tips - Debug commands

02.25.13   |  
‎02-25-2013 11:36 PM

thanks

 

 

ScreenOS Firewalls (NOT SRX)

Re: Troubleshooting Tips - Debug commands

07.27.13   |  
‎07-27-2013 08:26 AM
Hi, would like to ask a question, when I tried to use the debug commands, after the db st, I got a series of install v6 vector flow sentences, may I know what is that?