login: admin password: juniper-isg-> ping 45.200.1.2 Type escape sequence to abort Sending 5, 100-byte ICMP Echos to 45.200.1.2, timeout is 1 seconds ip 45.200.1.2 is unreachable in vr trust-vr Success Rate is 0 percent. juniper-isg-> show config ^-------unknown keyword show juniper-isg-> get config Total Config size 5658: set clock ntp set clock timezone -7 set vrouter trust-vr sharable set vrouter "untrust-vr" exit set vrouter "trust-vr" unset auto-route-export exit set vrouter name "ilabs" id 1025 set vrouter "ilabs" unset auto-route-export exit set auth-server "Local" id 0 set auth-server "Local" server-name "Local" set auth-server "$infranet" id 1 set auth-server "$infranet" server-name "45.200.1.78" set auth-server "$infranet" account-type xauth 802.1X set auth-server "$infranet" radius secret "I0oXY4TfNuIq6qspzHCrmAS7Finva7nEGDAyBuCckdkgDtpNeIgU/5vZb16V7TEB1EKu1fsXpjhl" set auth-server "$infranet" radius attribute calling-station-id set auth default auth server "Local" set auth radius accounting port 1646 set admin name "netscreen" set admin password "nEQGIprLE9/PcidFCstLJfFtCYB2Tn" set admin user "admin" password "nAIxN3rGAHRLcfOE8s3FTEBt99JIOn" privilege "all" set admin auth timeout 10 set admin auth server "Local" set admin format dos set zone "Trust" vrouter "trust-vr" set zone "Untrust" vrouter "trust-vr" set zone "DMZ" vrouter "trust-vr" set zone "VLAN" vrouter "trust-vr" set zone id 1000 "Corp" set zone "Corp" vrouter "ilabs" set zone id 1001 "UnknownDev" set zone id 1002 "guest" set zone "guest" vrouter "ilabs" set zone "Untrust-Tun" vrouter "trust-vr" set zone "Trust" tcp-rst set zone "Untrust" block unset zone "Untrust" tcp-rst set zone "DMZ" tcp-rst set zone "VLAN" block unset zone "VLAN" tcp-rst set zone "Corp" tcp-rst set zone "UnknownDev" tcp-rst set zone "guest" tcp-rst set zone "Untrust" screen tear-drop set zone "Untrust" screen syn-flood set zone "Untrust" screen ping-death set zone "Untrust" screen ip-filter-src set zone "Untrust" screen land set zone "V1-Untrust" screen tear-drop set zone "V1-Untrust" screen syn-flood set zone "V1-Untrust" screen ping-death set zone "V1-Untrust" screen ip-filter-src set zone "V1-Untrust" screen land set interface "ethernet1/1" zone "guest" set interface "ethernet1/2" zone "Corp" unset interface vlan1 ip set interface ethernet1/1 ip 45.200.17.1/24 set interface ethernet1/1 route set interface ethernet1/2 ip 45.200.11.63/24 set interface ethernet1/2 route unset interface vlan1 bypass-others-ipsec unset interface vlan1 bypass-non-ip set interface ethernet1/1 ip manageable set interface ethernet1/2 ip manageable set interface ethernet1/1 manage ping set interface ethernet1/1 manage web set interface ethernet1/2 manage ping set interface ethernet1/2 manage ssh set interface ethernet1/2 manage telnet set interface ethernet1/2 manage web set auth-server "$infranet" src-interface "mgt" set interface ethernet1/1 dhcp relay server-name "45.200.1.2" set interface ethernet1/1 dhcp relay service unset flow no-tcp-seq-check set flow tcp-syn-check set console page 0 set domain nac.ilabs.interop.net set hostname juniper-isg set pki authority default scep mode "auto" set pki x509 default cert-path partial set infranet controller name "juniper-uac" set infranet controller name "juniper-uac" host-name 45.200.1.78 port 11122 set infranet controller name "juniper-uac" src-interface mgt set infranet controller name "juniper-uac" password "6NHp6CJ1NF+PlLscA7CXuJc7Cen6Zogl/Q==" set infranet controller name "juniper-uac" url "https://45.200.1.78" set dns host dns1 45.200.1.2 set address "Corp" "IC" 45.200.1.78 255.255.255.255 set address "Corp" "infra.nac.ilabs.interop.net" 45.200.1.2 255.255.255.255 "DNS/DHCP Server" set address "Corp" "InfraSun" 45.200.1.2 255.255.255.255 set ike p2-proposal "nopfs-esp-null-sha" no-pfs esp null sha-1 second 3600 set ike respond-bad-spi 1 unset ike ikeid-enumeration unset ike dos-protection unset ipsec access-session enable set ipsec access-session maximum 5000 set ipsec access-session upper-threshold 0 set ipsec access-session lower-threshold 0 set ipsec access-session dead-p2-sa-timeout 0 unset ipsec access-session log-error unset ipsec access-session info-exch-connected unset ipsec access-session use-error-log set icap av-vendor-id symantec-5 set url protocol websense exit set policy id 4 from "guest" to "Corp" "Any" "infra.nac.ilabs.interop.net" "DHCP-Relay" permit set policy id 4 set dst-address "InfraSun" set service "DNS" exit set policy id 5 from "guest" to "Corp" "Any" "IC" "ANY" permit log set policy id 5 disable set policy id 5 exit set policy id 2 from "guest" to "Corp" "Any" "Any" "ANY" permit log set policy id 2 set idp exit set policy id 2 set log session-init exit set policy id 3 from "Corp" to "guest" "Any" "Any" "ANY" permit log set policy id 3 exit set nsmgmt report alarm traffic enable set nsmgmt report alarm attack enable set nsmgmt report alarm other enable set nsmgmt report alarm di enable set nsmgmt report log config enable set nsmgmt report log info enable set nsmgmt report log self enable set nsmgmt report log traffic enable set nsmgmt init id F0699E6A073445301EC9D784A0B3FFBD415971FB00 set nsmgmt server primary 45.200.1.6 port 7800 set nsmgmt bulkcli reboot-timeout 60 set nsmgmt hb-interval 20 set nsmgmt hb-threshold 5 set nsmgmt enable set ssh version v2 set ssh enable set scp enable set config lock timeout 5 set ntp server "45.200.1.2" set ntp server backup1 "0.0.0.0" set ntp server backup2 "0.0.0.0" set snmp port listen 161 set snmp port trap 162 set vrouter "untrust-vr" exit set vrouter "trust-vr" unset add-default-route exit set vrouter "ilabs" set route 0.0.0.0/0 interface ethernet1/2 gateway 45.200.11.1 exit set vrouter "untrust-vr" exit set vrouter "trust-vr" exit set vrouter "ilabs" exit juniper-isg->