Configuring Phase 2 Proposals (KB ID: KB4116)
| Article ID: | KB4116 |
|---|---|
| Former Article ID: | ns10086 |
| Published: | Nov 20, 2007 |
| Last Modified: | Nov 20, 2007 |
| Visible By: | Employee, PTAC, Partner, Customer, Public |
Back to Previous Page | Knowledge Base Home
Article URL
Synopsis
Configuring Phase 2 Proposals
Problem
Solution
To configure phase 2 proposals, perform the following steps:
Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI 
From the Juniper Firewall menu, click VPNs, and then click AutoKey IKE.
From the AutoKey IKE page, click New.
In the VPN Name text box, enter a VPN Name.
For this example, we entered dialupvpn1.
From Security Level, click to select Custom.
From Remote Gateway, in the Predefined drop-down menu, click to select your predefined gateway. For more information about configuring predefined gateways, go to Configuring Phase 1 Proposals. For this example, we selected vpngateway1.
Click Advanced.
From the Phase 2 Proposal drop-down menu, click to select a Phase 2 Proposal. Your Juniper Firewall supports up to four proposals for Phase 2 negotiations, allowing you to define how restrictive a range of security parameters for key negotiation you will accept. For this example, we chose one proposal, and selected nopfs-esp-des-sha.
Click Return.
Click OK.
Category Description
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN
By Product » Software » Network Operating Systems » ScreenOS Software
By Network Technology » IP Protocols » Tunneling Protocols » IPSec
Purpose
Troubleshooting