Michael Dale

Netscreen/SSG VPN Tuts/Info

• Setting up a dial-up VPN on a Netscreen
• Site to site vpn with a Netscreen 5GT and a Netgear DG834G
• Racoon to Netscreen VPN (site to site)
• Racoon to Netscreen VPN (dialup)
• Setting up the Secondary IP option on a netscreen with a PPPoE connection.
• Quick SSG 5 overview
• Setting up an IPv6 over IPv4 tunnel
• IPsecuritas Setup Screen Shots (Mac OS X VPN client)
• Photos of an SSG 5 (inside)
• Cisco ASA 5505 vs Juniper SSG 5
• Setting up a route based site-to-site vpn using aggressive mode
• Creating a VIP in a different subnet

Netscreen/SSG Benchmarks

• IPSec Throughput

Random Tips

The netscreen needs a "special" command set before it will forward a range of ports through a VIP.

To enable IPv6 type the following into the command line

Here is a useful program that automatically backs up the netscreen config (free for up to 5 devices)

SNMP Details - OIDs (tested on an SSG 5 - 5.4.0r3)

Netscreen Free Memory: .1.3.6.1.4.1.3224.16.2.2.0
Netscreen Allocated Memory: .1.3.6.1.4.1.3224.16.2.1.0
Netscreen Allocated Sessions: .1.3.6.1.4.1.3224.16.3.2.0
Netscreen CPU Load (1 min): .1.3.6.1.4.1.3224.16.1.2.0
Netscreen CPU Load (5 min): .1.3.6.1.4.1.3224.16.1.3.0
Netscreen CPU Load (15 min): .1.3.6.1.4.1.3224.16.1.4.0