Configuring The Security Policy; Assign And Install The Security Policy; Device-Level Vpn Examples - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Device-Level VPN Examples

Copyright © 2010, Juniper Networks, Inc.
For L2TP VPNs, you must also select the L2TP tunnel that you configured on the
device.
Select the Protected Resources for the VPN:
3.
If both VPN termination points are security devices, choose the protected resources
that represent the network components you want to protect. You can also select
a predefined Global MIP or VIP for the device.
If the source VPN termination point is a RAS user, select Source is Dialup and
choose the Protected Resources behind the destination VPN termination point
that represent the network components you want to protect on the remote network.
If the destination VPN termination point is a RAS user, select Destination is Dialup
and choose the Protected Resources behind the source VPN termination point
that represent the network components you want to protect on the local network.

Configuring the Security Policy

To configure the remaining columns for the VPN rule:
From Zone—Select the zone on the source VPN member that contains the termination
interface for the VPN tunnel.
To Zone—Select the zone on the destination VPN member that contains the termination
interface for the VPN tunnel.
Service column—Select the services you want to permit in the VPN tunnel.
You do not need to configure the action—NSM automatically defines the action as tunnel.
You can also configure traffic shaping, options, authentication, antivirus, or attack
protection for the VPN Rule.
To deny a host, use a deny rule before the VPN rule.

Assign and Install the Security Policy

You must assign the security policy to the each VPN member and install the security
policy on those devices before the VPN is active.
This section provides examples of the two device-level VPN types:
"Example: Configuring a Route-Based Site-to-Site VPN, Manual Key" on page 608
"Example: Configuring a Policy-Based Site-to-Site VPN, Manual Key" on page 613
"Example: Configuring a Policy-Based RAS VPN, L2TP" on page 614
The following sections provide step-by-step instructions on creating each type of
device-level VPN.
Chapter 12: Configuring VPNs
607