Device Level Autokey Ike Vpn: Using Routes Configuration Overview; Device-Level Autokey Ike Vpn: Using Vpn Configuration Overview; Device-Level Autokey Ike Vpn Properties - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual
Configuring screenos devices guide
Hide thumbs
Also See for NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01:
- Manual (340 pages) ,
- Administration manual (1026 pages) ,
- Installation manual (244 pages)
Table of Contents
Advertisement
Related
Documentation
Device Level AutoKey IKE VPN: Using Routes Configuration Overview
Related
Documentation
Device-Level AutoKey IKE VPN: Using VPN Configuration Overview
Device-Level AutoKey IKE VPN Properties
Copyright © 2010, Juniper Networks, Inc.
IKE SA softlifetime.
Device Level AutoKey IKE VPN: Using Routes Configuration Overview on page 227
Device-Level AutoKey IKE VPN: Using VPN Configuration Overview on page 227
Device Level VPN Types and Supported Configurations Overview on page 221
For a routing-based VPN member, you must configure:
Tunnel zone or tunnel interfaces on the member.
Static or dynamic routes from the member to other VPN members.
VPN traffic flows through the tunnel zones or tunnel interfaces on the security device,
and uses static or dynamic routes to reach other VPN members. You must create the
tunnel zones and interfaces before configuring routes.
For details on configuring tunnel zones, tunnel interfaces, static routes, or dynamic routes,
see "Configuring Virtual Routers Overview" on page 294.
After you have configured the tunnel zone or interface on the security device, you must
bind the VPN to that zone or interface to make the VPN functional.
Device-Level AutoKey IKE VPN: Using VPN Configuration Overview on page 227
Device-Level AutoKey IKE VPN: Using VPN Rule Configuration Overview on page 230
Device Level AutoKey IKE VPN: Using Gateway Configuration Overview on page 221
When you configure the VPN, you are defining the gateway the security device uses to
connect to the VPN, the IKE Phase 2 proposals used by that gateway, and how you want
NSM to monitor the VPN tunnel.
For route-based VPNs, you are also binding the VPN to the tunnel interface or zone that
sends and receives VPN traffic to and from the device.
The following topics explain how to configure device-level autokey IKE VPN using VPN
configuration:
Device-Level AutoKey IKE VPN Properties on page 227
ScreenOS Security Measures Using VPN Configuration on page 228
Binding/ProxyID on page 229
Monitor Management on ScreenOS Devices Using AutoKey IKE VPN on page 230
Enter the following values as described in Table 55 on page 228.
Chapter 8: Configuring VPNs
227
Advertisement
Table of Contents
