How to configure a Policy for a VPN (KB ID: KB4130)
| Article ID: | KB4130 |
|---|---|
| Former Article ID: | ns10101 |
| Published: | Nov 26, 2007 |
| Last Modified: | Nov 26, 2007 |
| Visible By: | Employee, PTAC, Partner, Customer, Public |
Back to Previous Page | Knowledge Base Home
Article URL
Synopsis
This article contains information on configuring a Policy for the Local Site of a Site-to-Site Policy Based VPN
Problem
Solution
To configure a policy for the local site, perform the following steps:
Open the WebUI. For more information on accessing the WebUI, consult: KB4060 - Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI
From the Juniper firewall menu, click Policies.
From the Policies page, in the From drop-down menu, click to select Trust, and in the To drop-down menu, click to select Untrust.
Click New.
From Source Address, in the New Address text box, enter the local network address.
In this example, we entered 192.168.1.0/24.
From Destination Address, in the New Address text box, enter the remote network address. In this example, we entered 10.1.1.0/24.
From the Action drop-down menu, click to select Tunnel.
From the Tunnel drop-down menu, click to choose the VPN tunnel. For this example, we selected vpntunnel1.
Click to select Modify matching bidirectional VPN policy.
Click to select Position at Top.
Click OK.
Category Description
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN
By Product » Software » Network Operating Systems » ScreenOS Software
By Network Technology » IP Protocols » Tunneling Protocols » IPSec
Purpose
Troubleshooting