Table of Contents
Advertisement
Copyright © 2010, Juniper Networks, Inc.
On the RADIUS server, you populate the external user group with XAuth users, leaving
the group unpopulated NSM. The RADIUS server authenticates the users during Phase
1 IKE negotiations.
In NSM, you leave the external user group unpopulated, but you must define each user
as a local user with an IKE ID, then create a group that includes those local users as
members. This IKE ID is used to authenticate the users during the Phase 2 IKE
negotiations.
Additionally, you must add the security device and create an Address object to represent
the FTP server, as well as a protected resource. After you have assembled all the VPN
components, you are ready to create the VPN.
Configure the RADIUS Server. On the RADIUS server, load the Juniper Networks
1.
dictionary file and define Xauth user accounts. Use the Juniper Networks user group
VSA to create the user group xa_grp2 and apply it to the auth user accounts that you
want to add to that group.
NOTE: For instructions on loading the dictionary file onto a RADIUS server, refer to the
RADIUS server documentation. If you are using a Microsoft IAS RADIUS server, there is
no dictionary file to load. Instead, define the correct vendor-specific attributes (VSAs)
on the server.
Add the authentication server object. In the main navigation tree, select Object
2.
Manager > Authentication Servers and click the Add icon. Configure the following,
then click OK:
a.
For name, enter radius1. Select a color and add a comment, if desired.
b.
For Main Server, enter the IP 10.20.1.100; for Primary Backup Server, enter IP
10.20.1.110; for Secondary Backup Server, enter IP 10.20.1.120.
c.
For timeout, enter 30.
d.
Enable For XAuth Users.
e.
For Server Type, select RADIUS.
Configure the RADIUS server:
1.
For server port, select 4500 (default is 1645).
For secret, enter A56hYY97kl.
For retry timeout, enter 4.
Add an External User Group (in NSM). In the Object Manager, select User Objects
2.
> External User Groups. Click the Add icon to display the New External User Group
dialog box. Configure the following, then click OK.
For Name, enter xa-grp2.
For Color, select yellow.
Chapter 12: Configuring VPNs
589
Advertisement
Table of Contents
Related Manuals for Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1
Related Products for Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - CONFIGURING INTRUSION DETECTION AND PREVENTION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INTRUSION DETECTION PREVENTION DEVICES GUIDE REV 01
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - API GUIDE REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING J SERIES SERVICES ROUTERS AND SRX SERIES SERVICES GATEWAYS GUIDE REV
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - NSMXPRESS SERIES II REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - M-SERIES AND MX-SERIES DEVICES GUIDE REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.2
- Juniper MEDIA FLOW MANAGER 2.0.2 - ADMINISTRATOR S GUIDE AND CLI
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CATEGORY OFFENSE INVESTIGATION GUIDE REV 1
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1
- Juniper MEDIA FLOW CONTROLLER 2.0.5
- Juniper 200 Series