Using The Ppp Option To Configure Point-To-Point Protocol Connections - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Related
Documentation

Using the PPP Option to Configure Point-To-Point Protocol Connections

134
Configure the GTP firewall (client):
9.
In the device navigation tree, select Advanced > NSGP > NSGP Connections. Click
the Add icon to display the New NSGP Connection dialog box.
For Source Interface, select ethernet 1/2.
For Destination, click Copy Existing NSGP Server Setting. The Copy Existing NSGP
Server Info dialog box appears.
Configure the following:
10.
For NSGP Server Info, select Gi firewall (server).
For Destination Interface, select ethernet1/2.
Click OK to copy the NSGP server settings to the GTP client. NSM automatically
11.
completes the destination server settings for the GTP client.
In GTP Objects, select the GPRS1 object.
12.
Click OK to save the NSGP Connection.
13.
Configure a firewall rule to handle GTP traffic.
14.
Configuring Hostnames and Domain Names Overview on page 130
Configuring NSGP Overview on page 131
Using the PPP Option to Configure Point-To-Point Protocol Connections on page 134
Use the PPP option to configure how the device handles Point-to-Point Protocol (PPP)
connections. PPP encapsulation allows different Network Layer protocols to be
multiplexed simultaneously over commonly used physical links. To establish a PPP
connection, you configure each end of a PPP link by exchanging Link Control Protocol
(LCP) packets. LCP is used to establish, configure, and test data-link options. These
options include encapsulation format options, authentication of the peer on the link,
handling of varying limits on sizes of packets, detecting a looped-back link and other
common misconfiguration errors; determining when a link is functioning properly or failing;
and terminating the link.
PPP allows for authentication during link establishment to permit or deny connection to
a device. This authentication can be performed using either Password Authentication
Protocol (PAP) or Challenge Handshake Authentication Protocol (CHAP). These
authentication protocols are intended for use primarily by hosts and routers that connect
to a network server through switched circuits or dial-up lines but can also be used with
dedicated lines.
For an interface with PPP encapsulation, you must configure a PPP access profile and
bind it to the interface. You create an access profile with a user-defined name that is
unique on the SSG device. You can bind the same access profile to more than one
Copyright © 2010, Juniper Networks, Inc.