Screen OS

 View Only
last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  How to Migrate SSG140 to SRX?

    Posted 10-07-2020 04:29

    SSG config.

    set auth-server "Local" id 0
    set auth-server "Local" server-name "Local"
    set auth-server "SSG" id 1
    set auth-server "SSG" server-name "10.10.10.10"
    set auth-server "SSG" account-type admin
    set auth-server "SSG" type tacacs
    set auth-server "SSG" tacacs secret "XXXXXXXXXXXX"
    set auth-server "SSG" tacacs port 49
    set auth-server "SSG" src-interface "ethernet0/0"
    set auth default auth server "Local"
    set auth radius accounting port 1646

     

     

    TO SRX config?

     



  • 2.  Re: How to Migrate SSG140 to SRX?

    Posted 10-07-2020 17:20

    This assumes the radius accounting is on your tac-plus server.  And you will need to subsitute the local ip address for the interface in the original configuration.

    set system authentication-order password
set system authentication-order tacplus
set system radius-server 10.10.10.10 accounting-port 1646
set system tacplus-server 10.10.10.10 port 49
set system tacplus-server 10.10.10.10 secret "$9$33eZnpBreW87V8X"
set system tacplus-server 10.10.10.10 source-address 10.10.10.1