Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 611 / 1016

•
“Autogenerating VPN Rules” on page 574
• “Configuring Overrides” on page 574
• “Adding the VPN Link” on page 576
NOTE: For an L2TP RAS VPN, you do not need to configure gateways or IKE.
The following sections detail each step.
NOTE: For step-by-step instructions on creating VPNs, see the NSM Online Help topic
"VPNs".
Adding the VPN
1.
From the menu bar, click VPN Manager > New and select the VPN type:
•
AutoKey IKE VPN—Use to connect devices and/or protected resources. An AutoKey
IKE VPN supports mixed-mode, policy-based, and routing-based VPNs, but does
not support RAS users.
• AutoKey IKE RAS VPN—Use to connect IKE RAS users and protected resources.
An Autokey IKE RAS VPN supports policy-based VPNs and IKE RAS users, but
does not support routing-based VPNs, mixed-mode VPNs, or L2TP RAS users.
•
L2TP RAS VPN—Use to connect L2TP RAS users and protected resources without
encryption.
•
L2TP over AutoKey IKE RAS VPN—Use to connect L2TP RAS users and protected
resources. An L2TP over AutoKey IKE RAS VPN supports policy-based VPNs and
L2TP RAS users, but does not support routing-based or mixed-mode VPNs.
2.
Enter a name for the VPN, then specify the general properties for the VPN:
• Enable—Use this option to enable/disable the VPN. If you disable the VPN, the
autogenerated VPN rules, VPN member gateways, and other device configuration
settings are not installed on your managed devices.
•
Termination Point—Select the Default Zone for the VPN Termination Point.
Typically, the default zone is untrust. When you configure the topology for the
VPN, you can select a unique termination point for each VPN member.
• View Properties—Configure the VPN components that the VPN Manager displays
for the VPN:
•
Type (AutoKey IKE VPN Only). Select the components you want to configure
for the VPN: Route-based components, Policy-based components, or both. By
default, VPN Manager displays all Route- and Policy-based components for an
AutoKey IKE VPN.
561 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring VPNs