Configuring PPTP, IPSec pass-through or L2TP over IPSec solutions on a Juniper Firewall device
Knowledge Base ID: KB8536
Version: 12.0
Published: 07 Oct 2008
Updated: 07 Oct 2008
Categories: . Firewall/IPSec_VPN
. L2TP
. PPTP
. ScreenOS

Synopsis:
The articles listed below will help you get started with configuring either a PPTP, IPSec pass-through, or an L2TP over IPSec VPN on a Juniper Firewall device.

Solution:

L2TP over IPSec

KB4094 (With NS-Remote)  Configuring a L2TP over IPSec Tunnel using NS Remote client
KB10939 (Without NS-Remote)  Configuring a L2TP over IPSec Tunnel using Windows XP native VPN client
KB6715 Configuring L2TP only (without IPSec ) using Windows 2000 native VPN client
KB4656 Conditions for Creating an L2TP Over IPSec Tunnel from Behind a NetScreen in NAT Mode

PPTP

KB12309 How do I enable PPTP traffic to exit through the Juniper firewall using ScreenOS 6.1
KB4481 How do I enable PPTP traffic to exit through the Juniper firewall using ScreenOS 6.0 and lower
KB5471 Allow PPTP traffic inbound through a NetScreen in NAT mode with only 1 publicly available IP address
Microsoft Tech Note ms811078 Installing, Configuring, and Using PPTP with Microsoft Clients and Servers
Section: Installing and Configuring PPTP on a PPTP Client

IPSec Pass-through

KB9243 How to pass IPSec traffic through a Juniper Firewall at ScreenOS 5.2 and above
KB7126 IPSec pass-through does not work unless an incoming policy is defined.
KB4715 Configuring your firewall to allow IPSec traffic to pass through in NAT mode
KB7282 Is IPSec traffic being blocked?

Purpose:
Configuration