Configuring Gateways - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide
594
Select
2. For IKEv2EAP users
Click .
OK
3.
Specify the self and peer authentication, and authentication methods for the IKEv2
gateway:
Navigate from
VPN Settings
1.
Enter the required information in the
2.
Enter the required information in the
3.
then these fields are hidden. This setting is also hidden on devices that do not
support IKEV2.
Click .
4. OK
Navigate from VPN Manager
5.
Select the authentication method for the device.
6.
Click .
OK
7.
For details on configuring IKEv2 for VPNs, refer to the Network and Security Manager
Configuring ScreenOS and IDP Devices Guide.

Configuring Gateways

A gateway is an interface on your security device that sends and receives traffic; a remote
gateway is an interface on another device that handles traffic for that device. Each security
device member has a remote gateway that it sends and receives VPN traffic to and from.
To configure a gateway for a VPN member, you need to define the local gateway (the
interface on the VPN member that handles VPN traffic) and the remote gateway (the
interface on the other VPN member that handles VPN traffic). The interface can be
physical or virtual.
For remote gateways that use static IP addresses, specify the IP address or host name
of the remote device.
For remote gateways that use dynamic IP addresses, configure an IKE ID for the remote
device.
For remote gateways that are RAS users, specify a Local User object as a remote
gateway to enable RAS user access.
To add a gateway to a security device, open the device configuration, select VPN Settings,
and click the Add icon to display the New Gateway Dialog box. Configure the gateway
as detailed in the following sections.
Properties
Enter a name for the new gateway, then specify the following gateway values:
Mode—The mode determines how Phase 1 negotiations occur.
from the Authentication Servers List.
> >
Gateway Gateway properties.
Authenticated by EAP
fields. If you enabled IKEv1,
Auth-method
> VPNs > AutoKey IKE VPN
Copyright © 2010, Juniper Networks, Inc.
fields.
> Gateway properties