Defining Vpn Checklist Overview; Defining Members And Topology In Nsm; Defining Traffic Types For Data Protection In Nsm - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Defining VPN Checklist Overview

Related
Documentation

Defining Members and Topology in NSM

Related
Documentation

Defining Traffic Types for Data Protection in NSM

Copyright © 2010, Juniper Networks, Inc.
After you have carefully considered your VPN requirements, create a VPN checklist to
help you determine the VPN components you need to create. You might also want to
create a network diagram of your topology that includes protected resources, VPN
members, their IP addresses and gateways, and the type of tunnel between them.
Defining Members and Topology in NSM on page 207
Defining Traffic Types for Data Protection in NSM on page 207
VPN Tunnel Types Overview on page 205
The different NSM members that you can connect to VPN are as follows:
Devices
Network components or protected resources
Remote access server (RAS) users
Extranet devices
The different methods of connecting the VPN members are as follows:
Site to site
Hub and spoke
Full mesh
You might want to create a network diagram to map out your VPN visually, with IP
addresses, to help you configure your topology.
Defining Traffic Types for Data Protection in NSM on page 207
Defining VPN Traffic Using Security Protocols in NSM on page 208
Defining VPN Checklist Overview on page 207
You can use the following traffic types for data protection:
Use a policy-based VPN to encrypt and authenticate certain types of traffic between
two network nodes.
Use a route-based VPNs to encrypt and authenticate all traffic between two network
nodes.
Use a mixed-mode VPN to encrypt and authenticate traffic between policy-based and
route-based VPNs nodes.
Chapter 7: Planning and Preparing VPNs
207