Juniper Netscreen about firewall_migration_tool

[VahidTa]

Hi,

Please try it and let me know if it works. I don't have access to netscreen platform now.

[theazlan89]

I have tried convert from juniper netscreen to fortigate but looks like failed.

errors "Something is wrong! check again"

For your information i have separate services, address object and policy, still cannot.

Thanks

[VahidTa]

Please take a look inside log folder and share it here.

[theazlan89]

2022-02-23 16:01:56 INFO [app.py:73] Conversion started ...
2022-02-23 16:01:56 INFO [parser.py:30] Address and Address_set conversion started ...
2022-02-23 16:01:56 WARNING [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2022-02-23 16:01:56 ERROR [parser.py:53] syntax error: line 1, column 0
2022-02-23 16:01:56 INFO [parser.py:54] ==================================================
2022-02-23 16:02:13 INFO [app.py:73] Conversion started ...
2022-02-23 16:02:13 INFO [parser.py:24] Policy conversion started ...
2022-02-23 16:02:13 WARNING [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2022-02-23 16:02:13 ERROR [parser.py:53] syntax error: line 1, column 0
2022-02-23 16:02:13 INFO [parser.py:54] ==================================================
2022-02-23 16:03:04 INFO [app.py:73] Conversion started ...
2022-02-23 16:03:04 INFO [parser.py:24] Policy conversion started ...
2022-02-23 16:03:04 WARNING [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2022-02-23 16:03:04 ERROR [parser.py:53] syntax error: line 1, column 0
2022-02-23 16:03:04 INFO [parser.py:54] ==================================================
2022-02-24 16:36:26 INFO [app.py:73] Conversion started ...
2022-02-24 16:36:26 INFO [parser.py:24] Policy conversion started ...
2022-02-24 16:36:26 WARNING [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2022-02-24 16:36:26 ERROR [parser.py:53] not well-formed (invalid token): line 1, column 0
2022-02-24 16:36:26 INFO [parser.py:54] ==================================================
2022-02-24 16:40:25 INFO [app.py:73] Conversion started ...
2022-02-24 16:40:25 INFO [parser.py:24] Policy conversion started ...
2022-02-24 16:40:25 WARNING [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2022-02-24 16:40:25 ERROR [parser.py:53] syntax error: line 1, column 0
2022-02-24 16:40:25 INFO [parser.py:54] ==================================================
2022-02-24 16:40:49 INFO [app.py:73] Conversion started ...
2022-02-24 16:40:49 INFO [parser.py:36] Service conversion started ...
2022-02-24 16:40:49 WARNING [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2022-02-24 16:40:49 ERROR [parser.py:53] syntax error: line 1, column 0
2022-02-24 16:40:49 INFO [parser.py:54] ==================================================

[VahidTa]

There is an issue on your file. Please make sure you are using this help to provide file for conversion:
https://fwmig.readthedocs.io/en/latest/srx.html

As NetScreen and current JunOs are similar, above url may helps.

[theazlan89]

Hi, SreenOS not supported XML. here i show sample config for your reference.

set service "TCP-9500-9502" + tcp src-port 0-65535 dst-port 9502-9502

set scheduler "schedule2" once start 3/2/2020 0:0 stop 8/1/2021 23:59

set interface ethernet2/1 dip 102 10.1.10.102 10.38.130.102 fix-port

set interface "ethernet0/1" mip 172.16.10.127 host 192.168.1.127 netmask 255.255.255.255 vr "trust-v

set address "Trust" "name2" 172.16.10.234 255.255.255.255

set group address "name1" "" add "name2"

set group service "PORT1" add "HTTP"

set policy id 48 from "Trust" to "Untrust" "SourceIP1" "DestinationIP1" "ICMP-ANY" permit log
set policy id 48
set src-address "MY IP1"
set src-address "MY IP2"
set service "SNMP"
exit

set policy id 40 from "Untrust" to "Trust" "incomingIP" "MIP(172.16.10.123)" "SYSLOG" permit log
set policy id 40

set policy id 719 from "Trust" to "BNM" "sourceIP" "destinationIP" "TCP-9501-9509" nat src permit log
set policy id 719
exit

set policy id 744 from "Trust" to "BNM" "sourceip1" "172.16.10.2/32" "HTTPS" nat src dip-id 35 permit log
set policy id 744
exit

set policy id 986 name "MY_NRF_256" from "Untrust" to "Trust" "I0.1.1.1" "172.16.10.2" "TCP-15200" nat dst ip 192.168.1.35 permit log
set policy id 986
set service "TCP-15201"
exit

set route 192.0.100.20/24 interface ethernet0/1 gateway 192.168.1.5 preference 20
set route 192.162.12.0/24 interface ethernet0/1 gateway 172.16.10.2

[VahidTa]

Thank you for sharing the syntax. Please check that if your version/platform supports Netconf or not.

[theazlan89]

As per checking, not support Netconf