Configuring a Policy for the Remote Site
| Knowledge Base ID: | KB4133 |
| Version: | 4.0 |
| Published: | 07 Oct 2008 |
| Updated: | 07 Oct 2008 |
| Categories: |
 Firewall/IPSec_VPN IPSec ScreenOS |
Configuring a Policy for the Remote Site
Solution:To configure a policy for the remote site, perform the following steps:
Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI 
From the Juniper firewall menu, click Policies.
From the Policies page, in the From drop-down menu, click to select Trust, and in the To drop-down menu, click to select Untrust.
Click New.
From Source Address, in the New Address text box, enter the local network address.
In this example, we entered 10.1.1.0/24.
From Destination Address, in the New Address text box, enter the remote network address. In this example, we entered 192.168.1.0/24.
From the Action drop-down menu, click to select Tunnel.
From the Tunnel drop-down menu, click to choose the VPN tunnel. For this example, we selected vpntunnel1.
Click to select Modify matching bidirectional VPN policy.
Click to select Position at Top.
Click OK.
Troubleshooting
