Configuring a Policy for Site A
| Knowledge Base ID: | KB4137 |
| Version: | 4.0 |
| Published: | 07 Oct 2008 |
| Updated: | 07 Oct 2008 |
| Categories: |
 Firewall/IPSec_VPN IPSec ScreenOS |
Configuring a Policy for Site A
Solution:To configure a policy for site A, perform the following steps:
Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI 
From the Juniper firewall menu, click Policies.
From the Policies page, in the From drop-down menu, click to select Trust, and in the To drop-down menu, click to select Untrust.
Click New.
From Source Address, in the New Address text box, enter site A's trust IP address/netmask.
In this example, we entered 10.1.1.0 / 255.255.255.0.
From Destination Address, in the New Address text box, enter site B's trust IP address/netmask. In this example, we entered 172.16.10.0 / 255.255.255.0.
From the Action drop-down menu, click to select Tunnel.
From the Tunnel drop-down menu, click to choose the VPN tunnel. For this example, we selected Site B VPN.
Click to select Modify matching bidirectional VPN policy.
Click to select Position at Top.
Click OK.
Troubleshooting
