Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 114

NSM Infranet Controller Configuration Guide
96
Add or modify IPsec routing policy settings as specified in Table 28 on page 96.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 28: IPsec Routing Policies Configuration Details
Option
Name
Description
Resource Type
Set Resources
Enforcer
Destination Zone
Function
Specifies the IPsec routing
policy name.
Describes the IPsec routing
policy.
Specifies whether the
Infranet Controller
dynamically provisions or
manually provisions the
IPsec routing policy.
Specifies the IP address
and netmask of each
resource that requires
endpoints to use IPsec.
Specifies the Infranet
Enforcer to which
endpoints connect to
access the resources
specified in this IPsec
routing policy.
Specifies the destination
zone where the protected
resources specified in this
IPsec routing policy are
located.
This destination zone is
configured on the Infranet
Controller.
Your Action
Enter a name for the IPsec routing
policy.
Enter a brief description for the IPsec
routing policy.
Select Manual— if you are using
ScreenOS version 6.1 or earlier.
Select Dynamic—if you are using
ScreenOS version 6.1 or later.
Click Set Resources. The Set
Resources dialog box appears.
Select Resources and enter new
resources one per line in the
following format:
<ip address>[/netmask]
Click Set Resources > Exceptions
and enter new exceptions one per
line in the following format:
<ip address>[/netmask]
Select the Infranet Enforcer.
Enter the destination zone that is
configured on the Infranet Enforcer.
For example: enter trust.
Copyright © 2010, Juniper Networks, Inc.