Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] Configuring a Dial-Up VPN

0

0

Article ID: KB8535 KB Last Updated: 31 Mar 2020Version: 21.0
Summary:
The articles listed below will help you get started with configuring a VPN client.
Solution:

Dial-up VPN

Common Configurations with NetScreen/SSG/ISG firewalls

KB14878 (ScreenOS 6.x, policy-based) Dial-Up VPN Clients using Pre-shared Keys
 

KB14883 
(ScreenOS 6.x, policy-based)
KB15272 
(ScreenOS 6.x, route-based)

  Multiple VPN Clients using the same IKE ID(Shared IKE) and XAuth


Note: Configuration Examples in Technical Documentation

ScreenOS  Concepts & Examples ScreenOS Reference Guide, Volume 5:  Virtual Private Networks

Chapter 5 -- Dialup Virtual Private Networks

    “Policy-Based Dialup VPN, AutoKey IKE” Example
    “Route-Based Dialup VPN, Dynamic Peer” Example
    “Policy-Based Dialup VPN, Dynamic Peer” Example
    “Bidirectional Policies for Dialup VPN Users” Example
    “Group IKE ID with Certificates ” Example
    “Wildcard and Container ASN1-DN IKE ID Types ” Example
    “Creating a Group IKE ID (Certificates) ” Example
    “Setting a Group IKE ID with Preshared Keys" Example
    “Shared IKE ID” Example

ScreenOS 6.3: http://www.juniper.net/techpubs/software/screenos/screenos6.3.0/630_ce_VPN.pdf
ScreenOS 6.2: http://www.juniper.net/techpubs/software/screenos/screenos6.2.0/ce_v5.pdf
ScreenOS 6.1: http://www.juniper.net/techpubs/software/screenos/screenos6.1.0/ce_v5.pdf
 
 
For additional Dial-Up VPN configuration assistance, consult one of the following articles:
 
   

Authentication

   
KB6642 Configure External Authentication to Microsoft IAS Server
Application Note
KB7304 Configure External Admin Authentication to Microsoft IAS Server
KB4463 (with screenshots)
KB6155 Configuring a Dial-Up VPN to Authenticate via WebAuth
   
KB5859 Configuring Multiple XAuth Users in a Single Group
KB5831 Authenticate a Remote VPN user with a smart card

Certificates

KB4775 Dial Up VPN using Certificates
KB7884 PKI Certificates Primer & FAQ with ScreenOS
Application Note JUNOS Enhanced Services IPSec VPN with PKI Certificates Primer

NAT-Traversal

KB4022 How Do I Enable NAT Traversal (NAT-T)?

Specific Configurations

   
KB6453 How do I create a Dial Up VPN to a DHCP assigned NetScreen?
KB4386 How Do I Force All Dial-Up VPN Traffic Through the NetScreen Before Going to the Internet?
KB5301 Create VPN to a MIP address
KB5546 Is there a Macintosh Virtual Private Network (VPN) client available?
Modification History:
2020-03-31: Archived
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search