Filter
Top Products
Virtual Private Networking Using IPSec and L2TP Connections
208
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
3. Click Apply to save your settings. The IPSec VPN policy is now added to the List of VPN
Policies table on the VPN Policies screen for IPv4. By default, the VPN policy is enabled.
Connection Name and Remote IP Type
What is the new Connection
Name?
Enter a descriptive name for the connection. This name is used to help you
to manage the VPN settings; the name is not supplied to the VPN client.
What is the pre-shared key? Enter a pre-shared key. The key needs to be entered both here and on the
remote
VPN gateway, or the remote VPN client. This key needs to have a
minimum length of 8 characters and cannot exceed 49 characters.
This VPN tunnel will use the
foll
owing local WAN Interface
Select a WAN interface from the drop-down list to specify which local WAN
interface the VPN tunnel uses as the local endpoint.
Select the En
able RollOver? check box to enable VPN rollover, and then
select a WAN interface from the drop-down list to the right of the check box
to specify the interface to which the VPN rollover should occur.
Note: If the VPN firewall is configured to function in WAN auto-rollover
mo
de, you can use the VPN Wizard to configure VPN rollover and do not
need to configure this manually.
End Point Information
a
What is the Remote Identifier
Information?
When you select the Client radio button in the About VPN Wizard section of
the screen, the default remote FQDN (remote.com) is automatically entered.
Use the default remote FQDN, or enter another FQDN.
Note: The remote ID on the VPN firewall is
the local ID on the VPN client.
It might be less confusing to configure an FQDN such as client.com as the
remote ID on the VPN firewall and then enter client.com as the local ID on
the VPN client.
What is the Local Identifier
Information?
When you select the Client radio button in
the About VPN Wizard section of
the screen, the default local FQDN (local.com) is automatically entered. Use
the default local FQDN, or enter another FQDN.
Note: The local ID on the VPN firewall is
the remote ID on the VPN client.
It might be less confusing to configure an FQDN such as router.com as the
local ID on the VPN firewall and then enter router.com as the remote ID on
the VPN client.
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
These fields are masked out for VPN client connections.
What is the remote LAN
Subnet Mask?
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of
an IP address and an FQDN is not supported.
Table 45. IPSec VPN Wizard settings for a client-to-gateway tunnel (continued)
Setting Description