[j-nsp] Netscreen to SRX Conversion

2011-08-13 Thread Altaf Ahmad
Hi All, Could anyone please let me know any tool to convert the Netscreen configuration into SRX language? Advance thanks for the support. Kind Regards, Altaf Ahmad ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] Netscreen to SRX Conversion

2011-08-13 Thread Tero Saari
Hi, Here's one but it requires support agreement: https://i2j.juniper.net/s2j/index.jsp Regards, Tero Saari tero.sa...@spof.fi On Aug 13, 2011, at 11:59 AM, Altaf Ahmad wrote: Hi All, Could anyone please let me know any tool to convert the Netscreen configuration into SRX language?

Re: [j-nsp] Netscreen to SRX Conversion

2011-08-13 Thread Darren Bolding
Having done a number of these migrations in the past, the tool is frequently not going to get you what you want- at least it didn't for me. I ended up building a few python and shell scripts to create address objects and migrate policies, but the rest of it was best dealt with by hand. Nothing

Re: [j-nsp] Radius - Static IP / ERX

2011-08-13 Thread Chris Hellberg
It might be because you don't have an ERX-Local-Interface VSA present. If that doesn't work, double-check that it's in your profile. There're one or two unexpected cases that you need to have the unumbered loopback interface information explicitly configured. The framed netmask shouldn't be

Re: [j-nsp] EX dual-root partitioning snapshots

2011-08-13 Thread Adam Leff
On Aug 12, 2011, at 14:36, Chuck Anderson c...@wpi.edu wrote: With 10.4R3 and newer dual-root partitioning feature, on initial upgrade most of my EX switches formatted upgraded both the primary and alternate root slices correctly. However, subsequent upgrades don't appear to keep those in

Re: [j-nsp] Netscreen to SRX Conversion

2011-08-13 Thread OBrien, Will
Agreed. You'll be well served to do these by hand. Especially given screenos's habit of not displaying all of a multipart policy on the command line. However, it's a pretty simple task to migrate the address entries to the address book format. Once that's done, policies aren't too bad of a

Re: [j-nsp] Netscreen to SRX Conversion

2011-08-13 Thread Kevin Cullimore
On 8/13/2011 9:37 AM, OBrien, Will wrote: Agreed. You'll be well served to do these by hand. Especially given screenos's habit of not displaying all of a multipart policy on the command line. However, it's a pretty simple task to migrate the address entries to the address book format. Once

[j-nsp] SRX best practices in SP and EP networks

2011-08-13 Thread uk2usa
Experts, Please share the best practices for SRX deployment in service provider and enterprise networks? Also, recommend SRX options I have for above cases Highly appreciated, -Dan ___ juniper-nsp mailing list juniper-nsp@puck.nether.net