Verifying and Updating Configuration of Extranets for VPNs - SRC 3.2.x Subscribers and Subscriptions Guide

From the SRC CLI, you can correct errors in extranet configuration when these errors result from directory or portal errors. In the extranet configuration, an extranet client of an object must be imported by that object.

In the SRC configuration for a subscriber that is the client of an extranet client, you specify a VPN for the imported extranet client. Typically, you add the extranet client and specify the imported extranet from the Enterprise Manager Portal. You can use the SRC CLI to verify the configuration and to make updates to the existing configuration.

From configuration mode, access the configuration statement that represents the configuration for the VPN.


                  
                     [edit]
                     user@host# edit subscribers retailer name
                           vpn  vpn-id


                  
                     [edit]
                     user@host# edit subscribers retailer  name  subscriber-folder  folder-name  enterprise  name  vpn  vpn-id

where vpn-id is the name of the routing instances on a JUNOS routing platform that implements the VPN.

View the configuration for the VPN. For example:

[edit subscribers retailer Acme vpn 1234]
user@host# show
extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users,
 o=umc" "enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];

(Optional) Change or add the distinguished name (DN) of a retailer or an enterprise that is an extranet client of this VPN.


                  
                     [edit subscribers retailer name vpn  vpn-id ]
                     
                     user@host# set extranet-client  extranet-client

For example:


                  
                     [edit subscribers retailer name vpn  vpn-id ]
                     
                     user@host# set extranet-client enterpriseName=Acme2,ou=local,retailername=default,
                           o=Users, o=umc

(Optional) Change or add extranets to be imported by specifying the DN of the extranet.


                  
                     [edit subscribers retailer name vpn  vpn-id ]
                     
                     user@host# set imported-extranets   imported-extranets

You can specify one or more extranets.

Verify that the updated configuration is correct.

[edit subscribers retailer name vpn 
vpn-id
]
user@host# show
[edit subscribers retailer Acme vpn 1234]
user@host# show
extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users,
 o=umc" "enterpriseName=Acme2, ou=local, retailername=default, o=Users,
 o=umc""enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];