Routing-Based Vpn Support Using Static And Dynamic Routes Overview; Preparing Optional Vpn Components Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Related
Documentation

Routing-Based VPN Support Using Static and Dynamic Routes Overview

Related
Documentation

Preparing Optional VPN Components Overview

Related
Documentation
216
Routing-Based VPN Support Using Static and Dynamic Routes Overview on page 216
Preparing Optional VPN Components Overview on page 216
Configuring Required Routing-Based VPN Components Overview on page 215
A security device must know the path, or route, between each protected resource or
security device in the VPN before it can forward packets from the source network to the
destination network on the other side of the tunnel. To specify the route, you can use
static routes, which define a specific, unchanging path between two VPN nodes, or
dynamic routes, which define an algorithm that dynamically determines the best path
between two VPN nodes.
NOTE: If you are using VPN Manager to create the route-based VPNs, you
create the routes after autogenerating the VPN. If you are creating a
device-level VPN, you can create the routes after configuring the tunnel
interfaces.
To create a static route, you must manually create a route for each tunnel on each device.
For VPNs with more than just a few devices, Juniper Networks highly recommends using
a dynamic routing protocol to automatically determine the best route for VPN traffic.
To route between different networks over the Internet, use Border Gateway Protocol
(BGP); to route within the same network, use Open Shortest Path First (OSPF). For
details on creating routes, see "Virtual Router Configurations for Root and Vsys Overview"
on page 251.
Preparing Optional VPN Components Overview on page 216
Optional VPN Support Using Authentication Servers Overview on page 217
Routing-Based VPN Support Using Tunnel Interfaces and Tunnel Zones Overview on
page 215
In any type of VPN, you can also use three optional components:
Authentication server
Certificate and certificate revocation list objects
PKI defaults
After you have created the component, you can use it to create your VPN.
Optional VPN Support Using Authentication Servers Overview on page 217
Optional VPN Support Using Certificate Objects Overview on page 217
Copyright © 2010, Juniper Networks, Inc.