Configuring a Phase 2 Proposal for the Local Site

To configure a phase 2 proposal for the local site, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI
From the Juniper firewall menu, click VPNs, and then click AutoKey IKE.

From the AutoKey IKE page, click New.

In the VPN Name field, enter a VPN name.

For this example, we entered vpntunnel1.

From Security Level, click to select Custom.

From Remote Gateway, in the Predefined drop-down menu, click to select your predefined gateway.

For this example, we selected vpngateway1.

Click Advanced.

From the Phase 2 Proposal drop-down menu, click to choose a Phase 2 Proposal.

Your Juniper firewall supports up to four proposals for Phase 2 negotiations, allowing you to define how restrictive a range of security parameters for key negotiation you will accept.

For this example, we chose one proposal, and selected nopfs-esp-des-sha.

Click Return.

Click OK.

Troubleshooting