Configuring a Manual Key Dial Up VPN User

This article applies to ScreenOS 4.0.  Manual Key Dial Up VPN configurations are not supported in Screen OS 5.0 and above.

To configure a manual key dial up VPN user, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, select your product from the list below:

• NetScreen-5XP
• NetScreen-5XT
• NetScreen-25/50
• NetScreen-204/208

From the NetScreen options menu, click Objects, select Users, and then click Manual Key.

From the Manual Key page, click New.

In the User Name text box, enter a user name.

For this example, we entered vpnuser2.

From Security Index, enter a Local and Remote security index.

For this example, we entered a Local Security Index of 5000, and a Remote Security Index of 5001.

From the Encryption Algorithm drop-down menu, click to choose an encryption algorithm.

For this example, we selected 3DES-CBC.

Click to select Generate Key by Password and then enter a password.

For this example, we entered netscreen.

From the Authentication Algorithm drop-down menu, click to select an encryption algorithm.

For this example, we selected MD5.

Click to select Generate Key by Password and then enter a password.

For this example, we entered netscreen.

Click OK.

From the manual key user list, navigate to the newly created user, and click Edit.

From the HEX Key text boxes, copy the values and save them to a text file.

These values will be needed when configuring the NetScreen Remote client.

Click Cancel.

For more information on logging into the VPN with NetScreen-Remote using manual keys, go to Logging into the VPN with NetScreen-Remote Using Manual Keys.

 

Troubleshooting