Juniper Netscreen: How do I capture debugging (debug flow) information

From the command line interface (CLI):

!Turn on the dbuf buffer
set console dbuf

!Set the parameters for debugging
set ffilter src-ip 192.168.10.50

!Turn on the debug flow
debug flow basic

!Use debug flow drop command to see dropped or denied packets (including those that did not make it to the policy engine).
debug flow drop

!turn debug off
undebug all

!check captured the stream
get dbuf stream

How do I capture debugging (debug flow) information?

How to configure preempt and priority NSRP options. How to force one firewall to be the preferred master.

SUMMARY:

How to force a device in the cluster to be the preferred master?

PROBLEM OR GOAL:

One of the firewalls of the cluster needs to be the preferred master.  How do you configure this?

SOLUTION:

The NSRP parameters preempt and priority are used to control the preferred master.  

  On the preferred master, enable 'preempt' mode and assign a lower priority to the firewall in the cluster.

Configuration example:
Important:  The device with the lowest priority will be the preferred master.

nsisg1000(M)-> set nsrp vsd-group id 0 priority 50  <- To assign priority to device. By default the priority is 100
nsisg1000(M)-> set nsrp vsd-group id 0 preempt      <- To enable preempt mode

To verify configuration:

nsisg1000(M)get nsrp vsd-group 
VSD group info:
init hold time: 5
heartbeat lost threshold: 3
heartbeat interval: 1000(ms)
master always exist: disabled
group priority preempt holddown inelig   master       PB other members
    0       50 yes            3 no       myself 12090607 
total number of vsd groups: 1
Total iteration=375750,time=399053148,max=6586,min=274,average=1062 

  On the other firewall, the preferred backup, only the priority needs to be specified.  Assign the priority to be a higher value than the priority of the preferred master.

nsisg1000(B)-> set nsrp vsd-group id 0 priority 100  

Note:  A preempt hold-time may also be configured on the preferred master.  Refer to the Concepts & Examples ScreenOSReference Guide: Vol 11, High Availability for more information. 

How to configure preempt and priority NSRP options. How to force one firewall to be the preferred master.

Cisco 877W Wireless configuration

Option 1: WIFI and LAN interface with different IP addressing

Option 2: WIFI and LAN share same IP addressing (AP)


https://sites.google.com/site/jimgwiki/other-stuff/configuring-a-cisco-877w-router
http://www.cisco.com/en/US/docs/routers/access/1800/wireless/configuration/guide/s37chan.html

Notes: when change from A to B, you might have to re-configure the SSID settings:

dot11 ssid <<your SSID>>
 authentication open
 authentication shared
 authentication key-management wpa
 guest-mode
 wpa-psk ascii 7 <<your passcode>>
!

DESIGNING SITE-TO-SITE IPSEC VPNS

DESIGNING SITE-TO-SITE IPSEC VPNS

Implementing IPsec VPN

Cisco Easy VPN Q&A

NAT failover with DUAL ISP on a router Configuration Example

NAT failover with DUAL ISP on a router Configuration Example

Example of how to configure the router

SMALL SITE MULTI-HOMING

Best practice of design Internet based single router dual links remote site 

EIGRP Stub Routing

EIGRP Stub Routing

DMVPN DESIGN Questions

• Should I use Phase-1, -2 or -3 DMVPN?
• Which routing protocol would work best in my DMVPN network?
• How can I design networks with redundant connectivity or redundant hub/spoke routers?
• How can I minimize the amount of routing information exchanged over DMVPN?
• Can I use default routing over DMVPN?
• How do I integrate centralized or local exit to the Internet with DMVPN?
• How can I use DMVPN as a backup path for my MPLS/VPN connectivity?
• How can I use 3G networks as a backup path for my DMVPN?

Different DMVPN phases
DMVPN and Routing Protocols – OSPF
DMVPN and Routing Protocols – EIGRP
DMVPN and Routing Protocols – BGP