Support Support Downloads Knowledge Base Service Request Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Aarchive] How do I remotely connect into my J Series or SRX Series device?



Article ID: KB10137 KB Last Updated: 04 Dec 2017Version: 8.0

The corporate office has a J Series or SRX Series device that can support VPN connections.  What VPN client options are available?  This article provides guidance on connecting NetScreen-Remote or other non-Juniper clients (see list below). 


This article applies to

  • J Series devices running:
    • JUNOS 9.4 and above
    • JUNOS with Enhanced Services 8.5 through 9.3
  • SRX Series devices

There are many VPN client solutions.  Below are just a few:

  • Dynamic VPNs
  • NetScreen-Remote IPSec VPN Client
  • IPSec VPN clients from 3rd party vendors such as:
    • Macintosh
    • Freeswan
    • Cisco
    • Checkpoint
  • IPSec over L2TP
  • PPTP

Note:  The devices listed above only support IPSec from either NetScreen-Remote (with some restrictions KB14370) or IPSec compliant third-party vendors. These devices cannot terminate SSL VPN, IPSec over L2TP or PPTP tunnels.


To view the flowchart for the steps listed below, select this link:  KB10137 Flowchart

 The following steps provide information on how to connect:

Step one  Will you be using the NetScreen-Remote Client?   NetScreen-Remote is not supported on SRX Devices.  For NetScreen-Remote product information, consult: Juniper Networks NetScreen-Remote or Deploying NetScreen-Remote Access Solutions

Step two Are you using the latest version of NetScreen-Remote? For assistance, consult: KB6161 - Determining the Current Version of NetScreen-Remote

  • Yes - Continue with Step 3
  • No  - in most cases, it is recommended to run the latest version of NetScreen-Remote Client. Please consult the Release Notes for the latest version to determine if an upgrade is possible.   For information on how to upgrade, consult the VPN Client Installation Guide

Step three Does the OS support the version of NetScreen-Remote?

Step four  Is this an Initial configuration?

Step five Will you be using certificate authentication?

Step six Will you be running Windows applications through the VPN?

            Applications such as Microsoft Outlook and/or Windows File Sharing / Mapped drives will require authentication

Additional Client VPN Configuration information can be found at: KB8535 - Configuring a NetScreen-Remote Dial-Up VPN

Modification History:
2017-11-14: Archiving as NetScreen Remote is EOL.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Security Alerts and Vulnerabilities

Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search