Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 645 / 1026

•
Ethernet1 is the Trust IP (10.2.2.1/24) in the Trust zone.
• Ethernet3 is the Untrust IP (2.2.2.2/24) in the Untrust zone.
• Create the address objects that you use for the VPN rule in the firewall rulebase
(for details on creating VPN rules, see “Adding VPN Rules” on page 615).
3.
Add the Tokyo Trust LAN (10.1.1.0/24) as a network address object. In Address Objects,
click the Add icon and select
Network . Configure the following, then click OK :
4.
Add the Tokyo and Paris security devices (for details on adding devices:
• For Name, enter Tokyo Trust LAN .
• For IP Address/Netmask, enter 10.1.1.0/24 .
•
For Color, select magenta .
•
For Comment, enter Tokyo Trust Zone .
5.
Add the Paris Trust LAN (10.2.2.0/24) as a network address object. In Address Objects,
click the Add icon and select
Network . Configure the following, then click OK :
• For Name, enter Paris Trust LAN .
•
For IP Address/Netmask, enter 10.2.2.0/24 .
•
For Color, select magenta .
• For Comment, enter Paris Trust Zone .
•
Create the VPN. In the navigation tree, double-click VPN Manager . Right-click VPNs
and select AutoKey IKE VPN . The New AutoKey IKE VPN dialog box appears.
Configure as shown below:
6.
In Name, enter Tokyo-Paris Route-based VPNs .
7.
Select Enable .
8.
In Termination Point, select Untrust .
9.
Click OK to save the VPN and return to VPN Manager. In VPN Manager, select the
Tokyo-Paris Route-based VPNs .
10.
Configure the route-based members:
a. In the main display area, select the security device link (under Route-Based
Configuration) to display the zone and tunnel options. Configure the default zone
and tunnel options.
b. Click the Add icon to display available security devices. Select the Paris and Tokyo
devices.
c. Click OK to add the members to the VPN.
d. Ensure that the route-based members are configured.
e. Click OK to save your settings and return to the main display area.
f. Configure the VPN topology:
595 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring VPNs