Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] Configuring a Dial-Up VPN



Article ID: KB8535 KB Last Updated: 31 Mar 2020Version: 21.0
The articles listed below will help you get started with configuring a VPN client.

Dial-up VPN

Common Configurations with NetScreen/SSG/ISG firewalls

KB14878 (ScreenOS 6.x, policy-based) Dial-Up VPN Clients using Pre-shared Keys

(ScreenOS 6.x, policy-based)
(ScreenOS 6.x, route-based)

  Multiple VPN Clients using the same IKE ID(Shared IKE) and XAuth

Note: Configuration Examples in Technical Documentation

ScreenOS  Concepts & Examples ScreenOS Reference Guide, Volume 5:  Virtual Private Networks

Chapter 5 -- Dialup Virtual Private Networks

    “Policy-Based Dialup VPN, AutoKey IKE” Example
    “Route-Based Dialup VPN, Dynamic Peer” Example
    “Policy-Based Dialup VPN, Dynamic Peer” Example
    “Bidirectional Policies for Dialup VPN Users” Example
    “Group IKE ID with Certificates ” Example
    “Wildcard and Container ASN1-DN IKE ID Types ” Example
    “Creating a Group IKE ID (Certificates) ” Example
    “Setting a Group IKE ID with Preshared Keys" Example
    “Shared IKE ID” Example

ScreenOS 6.3:
ScreenOS 6.2:
ScreenOS 6.1:
For additional Dial-Up VPN configuration assistance, consult one of the following articles:


KB6642 Configure External Authentication to Microsoft IAS Server
Application Note
KB7304 Configure External Admin Authentication to Microsoft IAS Server
KB4463 (with screenshots)
KB6155 Configuring a Dial-Up VPN to Authenticate via WebAuth
KB5859 Configuring Multiple XAuth Users in a Single Group
KB5831 Authenticate a Remote VPN user with a smart card


KB4775 Dial Up VPN using Certificates
KB7884 PKI Certificates Primer & FAQ with ScreenOS
Application Note JUNOS Enhanced Services IPSec VPN with PKI Certificates Primer


KB4022 How Do I Enable NAT Traversal (NAT-T)?

Specific Configurations

KB6453 How do I create a Dial Up VPN to a DHCP assigned NetScreen?
KB4386 How Do I Force All Dial-Up VPN Traffic Through the NetScreen Before Going to the Internet?
KB5301 Create VPN to a MIP address
KB5546 Is there a Macintosh Virtual Private Network (VPN) client available?
Modification History:
2020-03-31: Archived
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search