5GT - How to apply confing on manual restart

[How to run the NSM GUI under Mac OS X]

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

[cebulos]

Dear All,

I was assigned a project to upgrade  20 netscreen 5GT routers with new ADSL details.
I managed to copy config off the Router, and change details for test account, but when I load config from a file it asking me to restart the router to apply the changes straight away.
I need to copy config to the router ( kinda startup folder ) and apply changes only when the router will be manually restarted.
I have done similar thing with Cisco 800 routers, and I used TFTP server to do it.

How can I do in in 5GTs ?

Kind Regards

[alan]

CLI to copy the new config to device:
save file xxx from tftp 1.2.3.4 new-config

also might want to save the "last known good" config from CLI before just in case (before the above update)...
 save config to last-known-good
To restore from CLI: exec config rollback

You can also copy the config using scp (but not save to the device). For example...
ssg5-paleale-> get file
    flash:/crashdump.dmp                16384
    flash:/dhcpservl.txt                  160
    flash:/envar.rec                       74
    flash:/ns_sys_config                 3576

scp netscreen@1.2.3.4:ns_sys_config .
netscreen@1.2.3.4's password: xxx

You can update the firmware via scp
scp /tftpboot/ssg5ssg20.6.2.0r4.0 netscreen@1.2.3.4:image

Note the destination must be "image" per the above.
You'll need to "reset" for this to take effect.

If you want to automate the process there's a Perl module Telnet::Netscreen
http://search.cpan.org/~mramberg/Net-Telnet-Netscreen-1.2/lib/Net/Telnet/Netscreen.pm

[carthman]

Well if you do not care if it reboots on its own (aka loses power) and comes up with a new configuration you could always do the following

unset all
save conf from tftp x.x.x.x to flash

now when the box reboots it will come up on teh new config (as long as you don't save when exiting)

[cebulos]

Many Thanks Alan and Carthman.

I will try it today.

Kind Regards

[cebulos]

Hi again,

I have tried both solutions:

1.
save file xxx from tftp 1.2.3.4 new-config

Code:

Reading->save file xxx from tftp 10.0.100.3 new
Load file flash from TFTP 10.0.100.3 (file: new).
!!!!!!!!!!!!!!!!!!!!!
tftp received octets = 4726
tftp success!
Done

where new is new config file, and xxx is i am guessing kind of startup file on the 5GT (tried - flash, startup, xxx) and after restart it still uses old config.

2.
save conf from tftp x.x.x.x to flash

Code:

Reading-> save new from tftp 10.0.100.3 to flash
               ^-------unknown keyword new
Reading-> save file new from tftp 10.0.100.3 to flash
                                                 ^-------unknown keyword flash

where new is my new config file

I have a feeling that the first solution will work, but I just need to know "startup" file name (file that 5GT will read on startup, and copy any changes to the "live" config).

Firmware Version: 5.0.0r10b.p (Firewall+VPN)

Edit:

I finally managed to do it.

Code:

save config from tftp 10.0.100.3 new to flash
Load config from 10.0.100.3/new .
!!!!!!!!!!!!!!!!!!!!!
tftp received octets = 4685
tftp success!

TFTP Succeeded
Save config ...  Done

Where new is my new config file.

Thank you very much for helping me

Link that helped me
http://www.ajacob.net/firewall.html

Kind Regards

[carthman]

The correct syntax would be....


save conf from tftp 10.0.100.3 new to flash

[cebulos]

Many Thanks Carthman

•      Forum/Home
•      Store
•      Articles
•        Tech Articles
•        Industry News
•        Site News
•      Knowledgebase
•        JUNOS/Routing
•        NS/ISG/SSG/NSM
•        SSL VPN
•      Downloads

Please consider donating if we've saved you time or money. It helps pay for the bandwidth, equipment, and hosting charges to keep this site running

Submit Article/KB - Do not submit questions here.

[Today]

• Screening Spam by Joe Vallender [Today at 07:03:09 AM]
• Intrazone Policies by mknll [Today at 06:34:20 AM]
• Two ISPs and one DMZ by mulopaari2 [Today at 06:21:05 AM]
• Problem logging into my n... by fujisan [Today at 04:51:24 AM]
• VPN to cisco pix with two... by Watcher60 [Today at 04:38:27 AM]
• www.nikeincome.com cheap ... by xu_zhongying100 [Today at 02:30:17 AM]
• www.nikeincome.com cheap ... by xu_zhongying100 [Today at 02:29:08 AM]
• www.nikeincome.com cheap ... by xu_zhongying100 [Today at 02:27:32 AM]
• sell nike jordan fusion ... by xu_zhongying100 [Today at 02:25:15 AM]
• sell nike jordan fusion ... by xu_zhongying100 [Today at 02:22:32 AM]

Members

• Total Members: 22513
• Latest: eklein

Stats

• Total Posts: 40575
• Total Topics: 11249
• Online Today: 77
• Online Ever: 393
• (August 06, 2008, 07:40:57 AM)

Users Online

Users: 4
Guests: 67
Total: 71

mky2
Budak
jaax
dragonbreath