Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Unable to enable CPU-Protection on the firewall when it is running IPv6

0

0

Article ID: KB14761 KB Last Updated: 20 Feb 2013Version: 3.0
Summary:

This article describes the issue of being unable to enable CPU-Protection on the firewall, when it is running IPv6.

Symptoms:
  • CPU Protection on ScreenOS was first introduced in version 6.0.0r2 and it is configurable only on the ISG and NS5000 platforms.

  • On the WebUI of the device, under Configuration, the option to configure CPU-Protection is not available.

  • By design, CPU Protection cannot be configured, if IPv6 is enabled on the firewall.
Cause:

Solution:

Run the get envar command and check if IPv6 is enabled on the firewall. When IPv6 is enabled, CPU-Protection is not available.

nsisg2000-> get envar
run_image=default (nsISG2000[1].6.1.0r5-cu6.0)
loader_version=1.1.5
default_image=nsISG2000[1].6.1.0r5-cu6.0
last_reset=2009-07-10 20:03:55 by netscreen
ipv6=n   -----(Means IPv6 is disabled)

nsisg2000-> set ?
address                define address book entry
admin                   admin command
alarm                    set alarm parameters
alg                         attach alg
alias                      set alias
anti-spam            AntiSpam configuration
arp                         set arp entries
attack                    set attack
auth user              authentication settings
auth-server          authentication server settings
av                           AntiVirus configuration
bridge                  set bridge 21555
chassis               set chassis control
clock                    system clock adjustment
common-criteria           Common Criteria function
config                   set/unset config
console                console parameters
core-dump           setup core dump
cpu-limit vsys       cpu overutilization protection
cpu-protection    set cpu protection parameters

WIth IPv6:

nsisg2000-> get envar
default_image=nsISG2000[1].6.1.0r5-cu6.0
run_image=default (nsISG2000[1].6.1.0r5-cu6.0)
loader_version=1.1.5
last_reset=2009-07-10 12:41:40 by netscreen
ipv6=yes--------(IPv6 is On)


nsisg2000-> set ?
address                         define address book entry
admin                             admin command
alarm                              set alarm parameters
alg                                   attach alg
alias                                set alias
anti-spam                      AntiSpam configuration
arp                                   set arp entries
attack                               set attack
auth user                        authentication settings
auth-server                    authentication server settings
av                                      AntiVirus configuration
bridge                              set bridge 21555
chassis                           set chassis control
clock                                 system clock adjustment
common-criteria             Common Criteria function
config                                 set/unset config
console                              console parameters
core-dump                        setup core dump
cpu-limit                             vsys cpu overutilization protection
dbuf                                    set debug buffer

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search