Firewall Default Server & Banners Settings

Default Auth Server

Default Auth Server: Select a default auth server from the dropdown list. The auth servers that appear in the list are servers that you previously configured (see Auth Server Configuration).

Firewall Banners

You can customize the messages that appear to firewall users who log on to the security device via Telnet, FTP or HTTP. Default messages already exist, but you can write new ones to suit your needs. You can have different messages for Telnet, FTP and HTTP.

There are three types of messages. Enter the new message in the appropriate text field (the maximum number of characters is 220), and then click Apply to save your changes.

Login: Message appears when the firewall user tries to log on to the NetScreen device. Typically the message prompts the user to enter his or her user name and password.

Success: Message typically confirms that the user was successfully authenticated and that a connection was established.

Fail: Message typically informs that the authentication failed or that the user is unauthorized to access the NetScreen device.

RADIUS Miscellaneous Settings

Accounting Listener Port: Specifies the port (port_num) through which the device receives Accounting-Start and Accounting-Stop messages.

Accounting Listener Action: Enabling the Cleanup Sessions allows the device to clear out zombie sessions when it receives an Accounting-Stop message from an external RADIUS client.

This feature prevents misuse of wireless calls if subsequent users get the same assigned IP address, and happen to use the previous user's session in the device. It is not necessary to enable this setting to allow the security device to support RADIUS accounting while communicating with the RADIUS server.

Note: This feature is not supported on the vsys level, and is for the root level only.