Juniper EMEA partner of the year

Hi all,

I am very proud to announce that Securelink won the "EMEA partner of the year" for Juniper Networks.

The last 2 years we won the "Juniper Partner of the Year for Northern Europe"

Greetz,
Frac

IF-MAP Juniper

Hi all,

Been a while i did some posts, but i am very busy with several projects.

i been working with SRX devices, did some UAC projects with 802.1X, but also with IF-MAP implementation.

I did the IF-MAP with SA + SRX + SSG + IC appliances. I will do some more tests and implementations, when all this is done i will post some detail information

Hope see you all soon again,
Frac

Deploy SRX Cluster Across Layer 2 Network

Hi,

The SRX3400/3600 and the SRX5600/5800 can be deployed over a layer2 network. For this there is a nice guide line available by juniper. (SRX Series Services Gateways Cluster Deployment Acrosss Layer 2 Networks)

I did this with srx3400 on a layer2 cisco network and had some problems. The cisco l3 switches seem to check l3 traffic even if there are in a layer2 deployment. There the jsrp uses ip header for there traffic, these switches can block this traffic.

This means your jsrp will not work.

Here the commands you have to do, to disable these layer3 checks on cisco.

On a Cat 6500

- no mls verify ip checksum
- no mls verify ip length
- no mls verify ip same-address

For other cisco switches it seems the following command:

- no ip verify header vlan all

Kind Regards,
Frac

Check if i can make the screenos to junos click if i want

Hi all,

Because junos is spreading rappedly over the world, because of the launch of the SRX devices. I had to make the switch also.

As mentioned before, i worked/work a lot with ScreenOS, and must say i don't mind to make the switch to JUNOS if needed.

JUNOS is a ritch and nice OS, the more you work with it the more you will love it. It has nice advanced features, which you would love to have in ScreenOS (but sadly never will ...)

So because of this switch i wanted to check if i understand the junos security solution and did the exames JNCIS-ES.

I passed and have a other Certificate I can hang on the wall (well put in one of the schelfs with the other ...)

If you want to go the JUNOS way. I suggest you look at the fasttrack.

Fasttrack

Greetz,
Frac

back from holiday, ready for some SRX love

Hi all,

I am back from some holiday. hope you all got some time off also.

For now i am doing some SRX projects (SRX3400), and will post some stuff about this when i finished them.

cu all around.
Frac

Use a ScreenOS device to run JUNOS

Hi All,

Because of the nice coming SRX devices for the Branch, more and more people will need to learn JUNOS. Because most of use are used to work with ScreenOS, we also have more ScreenOS devices then JUNOS ones (SSG320/SSG350/SSG520/SSG550 instead of the J-series).

Well here is a how to, that explains how you can make a usb stick ready to run JUNOS and use this one on a device that is running ScreenOS.

First we need 1 device that runs JUNOS (j-series), on this device we will plug in the USB stick and create a copy of the OS.

root@router>request system snapshot as-primary partition media usb
Clearing current label...
Partitioning usb media (da0) ...
Partitions on snapshot:

Partition Mountpoint Size Snapshot argument
a / 1024MB root-size
e /config 196MB config-size
g /data 701MB data-size
Running newfs (1024MB) on usb media / partition (da0s1a)...
Running newfs (196MB) on usb media /config partition (da0s1e)...
Running newfs (701MB) on usb media /data partition (da0s1g)...
Copying '/dev/ad0s1a' to '/dev/da0s1a' .. (this may take a few minutes)
Copying '/dev/ad0s1e' to '/dev/da0s1e' .. (this may take a few minutes)
The following filesystems were archived: / /config

After this we can use this USB stick to use in a ScreenOS device (or in a JUNOS device)

IF you want to use this USB stick on a JUNOS device do the following:

root@router> request system reboot media usb

This will make the router reboot and boot from USB stick (you can use this to test upgrades for example)

IF you want to use this USB stick on a ScreenOS device do the following:

SSG350M-> System change state to Active(1)

SSG350M->
SSG350M-> set boot junos usb
Boot device has been set to USB
SSG350M->reset
Configuration modified, save? [y]/n n
System reset, are you sure? y/[n] y
In reset ...

After this you will boot in JUNOS (so you are running JUNOS on a ScreenOS device).

When you do a "request system reboot", he will boot back from Compact Flash and will ofcourse run ScreenOS again.

I use this to have a lot of JUNOS devices, because we have a lot of SSG in our lab running ScreenOS. (Most deployed devices at customers are ScreenOS, But this can/will change now with the SRX Branch devices.

GreetZ,
Frac

SecureLink is Juniper Networks Partner of the Year

Hi All,

I am very proud to announce that Securelink is Juniper Networks Partner of the Year.

During the 7th annual Partner Conference in Alicante Juniper Networks announced the appointment of SecureLink as Partner of the Year for Northern Europe. Out of hundreds of European partners SecureLink was rewarded for its constant focus and efforts for Juniper Networks products in Belgium and The Netherlands.

Click here to read more