Hardware Features-Srx210, Srx220, And Srx240 Services - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

JUNOS OS 10.4 Release Notes
100
phase of AUTHD. The credential of a user is configured either in Radius or in the access
database of AUTHD.
When using group-ike-id or shared-ike-id for user connection management and
licensing, the users on the client PC must use the same user credentials for both
WebAuth and XAuth login (that is, the two client login windows) to prevent undesirable
behavior and incorrect CLI output on the server.
NOTE: We recommend that you use group-ike-id whenever possible.
For group-ike-id, a part of the configuration for a user IKE ID is common to the group.
The IKE ID is the concatenation of an individual part and the common part of IKE ID.
For example, a user can use a group-ike-id configuration with a common part
".juniper.net" and the individual part "X". The IKE ID can be "X.juniper.net". Httpd-gk
generates the individual part of the IKE ID.
The group-ike-id does not require extended authentication (XAuth). However, for
dynamic VPN, XAuth is needed to retrieve the network attributes such as IP address
for the client. Therefore, if XAuth is not configured for group-ike-id and the administrator
uses the IKE gateway in a dynamic VPN client, a warning message appears.
This feature introduces new commands for ike sa and dynamic-vpn and new options
in the IKE Gateway Add/Edit page of J-Web.
[Junos OS CLI Reference, Junos OS Security Configuration Guide]
Hardware Features—SRX210, SRX220, and SRX240 Services Gateways
AX411 Access Point Support on SRX220 Services Gateways
SRX220 Services Gateways running Junos OS Release 10.4R1 or later releases support
the AX411 Access Point in the same manner as do the SRX210, SRX240, and SRX650
Services Gateways. Support for the SRX220 Services Gateway is not documented in the
AX411 Access Point Hardware Guide or in the WLAN Configuration and Administration
Guide, but wherever those guides indicate support for the SRX210 Services Gateway,
that support applies to the SRX220 Services Gateway as well.
1-Port Small Form-Factor Pluggable (SFP) Gigabit Ethernet Mini-Physical Interface
Module (Mini-PIM)
The 1-Port Small Form-Factor Pluggable (SFP) Gigabit Ethernet Mini-Physical Interface
Module (Mini-PIM) complements the on-board 10/100/1000 Mbps Ethernet interfaces
with extended LAN or WAN connectivity. It offers support for a variety of transceivers.
This Mini-PIM can be used in copper and optical environments to provide maximum
flexibility when upgrading from an existing infrastructure to Metro Ethernet. This Mini-PIM
is supported on the following devices:
SRX210 Services Gateway
SRX220 Services Gateway
SRX240 Services Gateway
Copyright © 2010, Juniper Networks, Inc.