Firewall Netscreen 50 Warning LED status

The warning LED of a netscreen 50 always on, red color.
How can i make back to normal status? Thanks.
dickchanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dickchanAuthor Commented:
I found out there is a critical alert in the log.
VIP server 192.168.1.100 cannot be contacted.
What should i do?
0
deimarkCommented:
Correct the problem with the VIP server on 192.168.1.100

For some reason the netscreen can't talk to it.
0
dickchanAuthor Commented:
I can ping the VIP server 192.168.1.100 when telnet the firewall.
Any suggestions? Thanks.
0
Firewall Management 201 with Professor Wool

In this whiteboard video, Professor Wool highlights the challenges, benefits and trade-offs of utilizing zero-touch automation for security policy change management. Watch and Learn!

deimarkCommented:
Copy in the logs you see relating to this, so that we can see what you do.

I would suspect that the VIP is not responding on the port/service that is being forwarded to it.

Double check that.
0
thechaosrealmCommented:
I've found that the NetScreen will pop that error in the logs ALL THE TIME. I just turn off "Server Detection" in the VIP setup and the alarm goes away. As long as you can do what the VIP is configured to do, don't worry about what the Juniper says.
0
dickchanAuthor Commented:
How can i turn of the Server Detection option form netscreen 50?
I can not find the options from the webUI. Or i only
can do it by CLI?
Please teach me some steps if for command line. thanks.
0
alienXenoCommented:
just append manual to your vip statement via cli to turn off auto server detection

for example

set interface ethernet3 vip untrust xxx "xxx"  xxx.xxx.xxx.xxx manual
manual               turn off server auto detection
0
stagiraCommented:
Hi,

you can also do this via the WebUI, just go to

Network>Interfaces

select the Untrust Interface, then VIP,

then the desired vip services, and untick the box: Server Auto Detection

--
Regards
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.