Configuring a Phase 2 Proposal for Site B

To configure a phase 2 proposal for site B, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI

From the Juniper firewall menu, click VPNs, and then click AutoKey IKE.

From the AutoKey IKE page, click New.

In the VPN Name text box, enter a VPN name.

For this example, we entered Site A VPN.

From Security Level, click to select Custom.

From Remote Gateway, in the Predefined drop-down menu, click to select your predefined gateway. For more information about configuring a predefined gateway, go to Configuring a Gateway for Site B.

For this example, we selected Site A GW.

Click Advanced.

From the Phase 2 Proposal drop-down menu, click to choose a Phase 2 Proposal.

Your Juniper firewall supports up to four proposals for Phase 2 negotiations, allowing you to define how restrictive a range of security parameters for key negotiation you will accept.

For this example, we chose one proposal, and selected g2-esp-3des-sha.

Click Return.

Click OK.

Troubleshooting