Setting up VNC on Netscreen 5gt

You can't setup vnc on a netscreen as netscreen doesn't have a desktop environment to run it on. You can, however, run vncserver on a PC or server that is directly connected to the netscreen and use vncviewer to access that machine. Once you are in that machine, you can startup a web browser or whatever is needed to access the netscreen for management.

Hi,

yea sorry didn't clarify my question.  I  have tight vnc server running on one my servers so wanted to know how do i access that server remotely using vnc viewer.  I know i have to use port 5900 but didn't know where i configure this in the netscreen in the administration section.  thanks.

You need to set up a VPN tunnel to the Netscreen 5GT and connect it. Then you should be able to access the server either by Remote Desktop Connection (how I do it) or by VNC. ... Thinkpads_User

That's the part i want to know, how do you set up the vpn tunnel in netscreen.  Which section is it in of the netscreen configuration?

The Netsceen 5GT is a fairly powerful and flexible machine. There is not one section. You have several sections (Addressing, Groups, Objects and Policies) all to be set up. Once done you need to pick client software (Juniper Netscreen Remote or NCP Secure Entry VPN) and set up the client.

Unfortunately, on this kind of stuff, if you do not have the experience, you probably need to engage a trained consultant to set it up for you. The skill is very, very specialized, and that is how I do it.
... Thinkpads_User

I have already done it when i set up rdp using port 3389 to accesss 4 servers but i wanted to use vnc coz it allows you to share the screen with the user and doesnt lock out user the way remote desktop does.  It is under policies and you select from unttrust(internet) to trust(internal network) then you just map it to public ip address of that server.  I just thought there was another way.  I don't use netscreen that much just doing this for a client.  thanks.

If you are going around the Netscreen security to use VNC and exposing the server publicly, then I think you are incurring a serious security risk.

The way I recommend (and I know it is highly technical) is to use a VPN tunnel to the server and then VNC should work as intended. I think this is the "other way" you are referring to.
... Thinkpads_User

No i wouldn't expose server coz we have the system firewalled but i have set up vpns before so would be too technical if you never did idid it before i agree but i have set up citrix and remote desktop and vpn but wanted to just know if there was a different way to configure netscreen for vnc as opposed to remote desktop.  Even on simpler routers like netgear and linksys you can set up vnc by just ip forwarding to internal machine as long as you had static ip.  The security in these comes from nat(network address translation).  I can just go to their website and get the whitepapers on it since this is how i did the vpn lat year.  thanks anyway.