Configuring a Dial-Up VPN to Authenticate via WebAuth on Your Juniper Networks NetScreen Device

This article applies to ScreenOS 4.0 and higher.

To configure a dial-up VPN to authenticate via WebAuth on your Juniper Networks NetScreen device, perform the following steps:

Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen Using the WebUI.

From the NetScreen options menu, click Objects, select Users, and then click Local.

Image of step two

From the Local page, click New.

Image of step three

In the User Name text box, enter a user name.

Image of step four

Click to select Simple Identity.

Image of step five and six

In the IKE Identity text box, enter an IKE identity.

Click to select Authentication User, and in the User Password and Confirm Password text boxes, enter a password, and then confirm it.

Image of step seven and eight

Click OK.

From the NetScreen options menu, click VPNs, select AutoKey Advanced, and then click Gateway.

Image of step nine

From the Gateway page, click New.

Image of step ten

In the Gateway Name text box, enter a gateway name.

Image of step eleven

From Remote Gateway Type, click to select Dialup User, and in the User drop-down menu, click to select the IKE user name.

Image of step twelve

In the Preshared Key text box, enter a preshared key.

Image of step thirteen

In the Outgoing Interface drop-down menu, click to select ethernet3.

Image of step fourteen and fifteen

Click Advanced.

From User Defined, click to select Custom.

Image of step sixteen and seventeen

In the Phase 1 Proposal drop-down menu, click to choose an encryption level.

From Mode (Initiator), click to select Aggressive.

Image of step eighteen

Click Return.

Image of step nineteen

Click OK.

Image of step twenty

From the NetScreen options menu, click VPNs, and then click AutoKey IKE.

Image of step twenty-one

From the AutoKey IKE page, click New.

Image of step twenty-two

In the VPN Name text box, enter a VPN name. From Security Level, click to select Custom.

Image of step twenty-three and twenty-four

From Remote Gateway, click to select Predefined, and then in the Predefined drop-down menu, click to select the remote gateway.

Click Advanced.

Image of step twenty-five

From Phase 2 Proposal, click to choose an encryption level.

Image of step twenty-six

Click Return.

Image of step twenty-seven

Click OK.

Image of step twenty-eight

From the NetScreen options menu, click Policies.

Image of step twenty-nine

In the From drop-down menu, click to select Untrust, and in the To drop-down menu, click to select Trust.

Image of step thirty and thirty-one

Click New.

From Source Address, click to select Address Book, and then in the drop-down menu, click to select Dial-Up VPN.

Image of step thirty-two and thirty-three

From Destination Address, click to select New Address, and then in the text box, enter the WebAuth IP address.

In the Service drop-down menu, click to select HTTP, and in the Action drop-down menu, click to select Tunnel.

Image of step thirty-four and thirty-five

In the Tunnel VPN drop-down menu, click to select the dial-up VPN.

Click OK.

Image of step thirty-six

Configure the NetScreen-Remote client. For more information, go to Configuring a Dial-Up VPN to Authenticate via WebAuth on Your Juniper Networks NetScreen-Remote Client.

Knowledge Base