On 8/13/2011 9:37 AM, OBrien, Will wrote:
Agreed. You'll be well served to do these by hand. Especially given screenos's 
habit of not displaying all of a multipart policy on the command line.

However, it's a pretty simple task to migrate the address entries to the 
address book format.
Once that's done, policies aren't too bad of a job.

On Aug 13, 2011, at 7:40 AM, Darren Bolding wrote:

Having done a number of these migrations in the past, the tool is frequently
not going to get you what you want- at least it didn't for me.

I ended up building a few python and shell scripts to create address objects
and migrate policies, but the rest of it was best dealt with by hand.

Nothing against the i2j tool- it's a difficult if not impossible problem.
It just didn't work in any of the instances I worked with it.
It's merely difficult, not impossible. It DOES, however, require more programming skills than the average implementer of firewalls & routing/switching gear possesses.

I've yet to encounter or hear of a firewall conversion project making use of automation that didn't involve manual verification and correction of the output.
Best of luck!

--D

p.s. From what I can tell, the Junos for Dummies book is actually
surprisingly useful if you are a JunOS newbie.

On Sat, Aug 13, 2011 at 3:17 AM, Tero Saari<tero.sa...@spof.fi>  wrote:

Hi,

Here's one but it requires support agreement:

https://i2j.juniper.net/s2j/index.jsp

Regards,
Tero Saari<tero.sa...@spof.fi>

On Aug 13, 2011, at 11:59 AM, Altaf Ahmad wrote:

Hi All,



Could anyone please let me know any tool to convert the Netscreen
configuration into SRX language?



Advance thanks for the support.







Kind Regards,

Altaf Ahmad

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



--
--  Darren Bolding                  --
--  dar...@bolding.org           --
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to