This article contains information on configuring a Policy for the Local Site of a Site-to-Site Policy Based VPN

To configure a policy for the local site, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, consult: KB4060 - Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI

From the Juniper firewall menu, click Policies.

From the Policies page, in the From drop-down menu, click to select Trust, and in the To drop-down menu, click to select Untrust.

Click New.

From Source Address, in the New Address text box, enter the local network address.

In this example, we entered 192.168.1.0/24.

From Destination Address, in the New Address text box, enter the remote network address.

In this example, we entered 10.1.1.0/24.

From the Action drop-down menu, click to select Tunnel.

From the Tunnel drop-down menu, click to choose the VPN tunnel.

For this example, we selected vpntunnel1.

Click to select Modify matching bidirectional VPN policy.

Click to select Position at Top.

Click OK.

Troubleshooting