Configuring The Security Policy; Assigning And Installing The Security Policy; Example: Creating Device Level Vpn Type 1 (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide

Configuring the Security Policy

Assigning and Installing the Security Policy

Related
Documentation

Example: Creating Device Level VPN Type 1 (NSM Procedure)

238
Select the protected resources for the VPN:
If both VPN termination points are security devices, choose the protected resources
that represent the network components you want to protect. You can also select a
predefined global MIP or VIP for the device.
If the source VPN termination point is a RAS user, select Source is Dialup and choose
the protected resources behind the destination VPN termination point that represent
the network components you want to protect on the remote network.
If the destination VPN termination point is a RAS user, select Destination is Dialup
and choose the protected resources behind the source VPN termination point that
represent the network components you want to protect on the local network.
To configure the remaining columns for the VPN rule:
From Zone—Select the zone on the source VPN member that contains the termination
interface for the VPN tunnel.
To Zone—Select the zone on the destination VPN member that contains the termination
interface for the VPN tunnel.
Service column—Select the services you want to permit in the VPN tunnel.
You do not need to configure the action—NSM automatically defines the action as tunnel.
You can also configure traffic shaping, options, authentication, antivirus, or attack
protection for the VPN rule. For details on configuring these rule options, see the Network
and Security Manager Administration Guide.
To deny a host, use a deny rule before the VPN rule.
You must assign the security policy to each VPN member and install the security policy
on those devices before the VPN is active.
Creating Device Level L2TP-over-Autokey IKE VPNs Overview on page 237
Example: Creating Device Level VPN Type 1 (NSM Procedure) on page 238
Example: Creating Device Level VPN Type 2 (NSM Procedure) on page 243
This topic provides examples of the two device-level VPN types with step-by-step
instructions on creating each type of device-level VPN.
NOTE: For examples on creating other VPN types using VPN Manager, see
the Network and Security Manager Administration Guide.
Copyright © 2010, Juniper Networks, Inc.