[Last Call] Learn how to a build a cloud-first strategyRegister Now


Netscreen Configuration question (NS5XP)

Posted on 2007-07-28
Medium Priority
Last Modified: 2010-04-09
I have a netscreen NS5xp we had to move the server for repairs, so we unplugged the DC (SBS2003) and the main switch that the Netscreen was connected to.
After moving all the equipment back and powering up we can ping the trusted interface on the netscreen (
I have been able to connect to the Console and can login, but at this point Im lost how can I check to see if the netscreen is still configure correctly& Im not sure why it would change since we did not touch it at all, but I need this back on line as soon as possible.
Question by:mspencer100
LVL 32

Expert Comment

ID: 19590324
See from there if you're able to ping both sides of addresses. That is see if you can ping the server and ping the internet ip address (if the firewall is connected to internet).


Expert Comment

ID: 19598896
If found any problem while accessing you may even want to check following clis,

get int untrust
(Check whether services are still enabled on the interface)

get route
(Check if the route is present in the config on device)

get polcy
(Check if the rules still specifically have the source and destination addresses with the desired Action

LVL 32

Accepted Solution

dpk_wal earned 2000 total points
ID: 19599172
If you have backed up the configuration earlier, you can copy the config file from device to a tftp server and then compare the files to check if there are any changes. Following command would send the config to tftp server [here a.b.c.d is the IP address of your tftp server and filename is the name of the file which would be created on your tftp server]:
ns5xp>get config > tftp a.b.c.d filename

Thank you.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses
Course of the Month17 days, 21 hours left to enroll

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question