domingo, 17 de abril de 2016

Cisco ASA, Juniper ScreenOS and Juniper JunOS Commands.

 Cisco ASA to Juniper  ScreenOS to Juniper JunOS Command

Here is a basic referente sheet for looking up equivalent command between a Cisco ASA and a Juniper ScreenOS (or Netscreen) SSG and a Juniper JunOS SRV Firewall.



Cisco ASAJuniper ScreenOS (SSG)Juniper JunOS (SRX)
show logget eventshow log messages
show log messages | last 20 (see the 20 most recent logs)
show ipget interfaceshow interface terse
show failoverget nsrpshow log jsrp
show chassis cluster [status|statistics|interfaces]
no failover activeexec nsrp vsd [vsd] mode backuprequest chassis cluster failover redundancy-group [group] node
show routeget routeshow route
show connectionsget sessionshow security flow session
show clockget clockshow system uptime
show version (to get uptime)get systemshow system uptime
show running-configget configshow config
show version (to get serial number)get chassisshow chassis hardware detail
show access-listget policyshow security policies
show crypto isakmp saget ike cookieshow security ike security-associations
show crypto ipsec saget sashow security ipsec security-associations
clear crypto isakmp saclear ike cookieclear security ike security-associations
clear crypto ipsec saclear saclear security ipsec security-associations
show cpuget perf cpushow chassis routing-engine
show proc cpu-usageshow system processes extensive
show int (for i/o of bytes) get counter statisticssh int
ssh x.x.x.0 y.y.y.0 insideset admin manager-ip x.x.x.0 y.y.y.0
set ssh enable
set security zones security-zone TRUST host-inbound-traffic system-services ssh
show run [cry isakmp|tunnel-group]?get ike gatewayshow config security ike
show config security ipsec
interface Ethernet1
shutdown
set interface ethernet0/0 phy link-downset interfaces ge-0/0/3 disable
interface Ethernet1
no shutdown
unset interface ethernet0/0 phy link-downdelete interfaces ge-0/0/3 disable
route outside 1.1.1.0 255.255.255.0 1.1.1.2set route 1.1.1.0/24 interface bgroup3/0 gateway 1.1.1.2set routing-options static route 10.10.10.128/25 next-hop 172.16.100.1
logging host INSIDE 1.1.1.1
logging trap notification
set syslog config 1.1.1.1 facilities local5
set syslog src-interface ethernet1/0
set syslog enable
set system syslog source-address 10.14.4.4
set system syslog host 1.1.1.1 any notice
ntp server 1.1.1.1 source OUTSIDEset ntp server 1.1.1.1
set ntp server src-interface ethernet3/0
set clock ntp
exec ntp update
set system ntp server 1.1.1.1 prefer
capture CAP1 match ip host 1.1.1.1 host 2.2.2.2clear db
set console dbuf
set ffilter src-ip 1.1.1.1 dst-ip 2.2.2.2
debug flow basic— OR —snoop filter ip src-ip 1.1.1.1 dst-ip 2.2.2.2 direction both
clear dbuf
snoop
edit security flow traceoptions
set file TSHOOT
set flag basic-datapath
set packet-filter IN-TO-OUT source-prefix 10.1.1.100/32 destination-prefix 10.2.0.3/32
show capture CAP1get dbuf streamshow log TSHOOT
clear capture CAP1undebug all
unset ffilter— OR —snoop filter delete
deactivate security flow traceoptions
delete security flow traceoptions

Nenhum comentário:

Postar um comentário