O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

10.6. Dynamic Route-Based VPN with RIPv2

Problem

You need to configure a VPN between multiple sites and use a dynamic routing protocol to distribute the route table.

Solution

Use route-based VPN configurations with RIPv2 enabled on the selected interfaces.

Primary hub site configuration

For the primary hub site configuration, start by creating the zone and interface:

	Primary-Hub-> set zone name vpn
	Primary-Hub-> set interface tun.11 zone vpn
	Primary-Hub->set interface tun.11 ip 10.70.70.1/28

Now, configure the VPN Phase-1 and Phase-2 parameters:

	Primary-Hub-> set ike gateway denton dynamic s1_denton@xyzcorp.com
	              Aggressive outgoing-interface eth0/3 preshare juniper
	              123 sec-level standard
	Primary-Hub-> set vpn denton gateway denton sec-level standard
	Primary-Hub->set vpn denton bind interface tun.11

Enable the VPN monitor and rekey options:

	Primary-Hub-> set vpn denton monitor rekey
	Primary-Hub-> set vpnmon interval 2
	Primary-Hub->set vpnmon threshold 5

And enable RIP globally and on any interfaces necessary:

	Primary-Hub-> set vr trust-vr protocol rip
	Primary-Hub-> set vr trust-vr protocol rip enable
	Primary-Hub-> set interface tun.11 protocol rip enable
	Primary-Hub->set vr trust-vr protocol rip demand-circuit

Now, create a static route to the resources via a private router:

	Primary-Hub-> set route 10.88.10.0/24 interface eth0/0 gateway
	              0.140.10.1

Configure redistribution of the static route into RIP:

	Primary-Hub-> set vr trust-vr access-list 88 permit ip 10.88.10.0/24 1
	Primary-Hub-> set vr ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required