O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

10.1. Create a Simple User-to-Site VPN

Problem

You need to provide VPN connectivity between multiple roaming users and the headquarters location.

Solution

Use NetScreen-Remote software to establish a secure tunnel to the hub location for a group of remote users with local Xauth authentication. Because multiple users will need to access this VPN, a shared IKE ID with a preshared key approach will be used.

First, define your protected resources (address objects):

	Corp-VPN-Hub-> set address trust mail1 10.140.10.10/32

Now, set the IKE ID, users, and group configuration:

	Corp-VPN-Hub-> set user lab_users ike-id users@dallab.juniper.net
	share-limit 250
	Corp-VPN-Hub-> set user-group dallab_users user lab_users
	Corp-VPN-Hub-> set user dude password letmein
	Corp-VPN-Hub-> set user dude type xauth
	Corp-VPN-Hub-> set user mike password 12345678
	Corp-VPN-Hub->set user mike type xauth

Set the VPN Phase-1 and Phase-2 configurations:

	Corp-VPN-Hub-> set ike gateway lab_gateway dialup dallab_users
	               aggressive outgoing-interface eth0/3 preshare
	               juniper123 sec-level standard
	Shared IKE ID dial-up group configured. Please note XAUTH server
	must be turned on as well.
	Corp-VPN-Hub-> set ike gateway lab_gateway xauth
	Corp-VPN-Hub->set vpn lab_vpn gateway lab_gateway sec-level standard

Create a new connection using the NetScreen-Remote setup (named "Corp" in this example), as shown in Figure 10-3.

Using the NetScreen-Remote setup to create a new connection

Figure 10-3. Using ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required