Verifying and Updating Configuration of Extranets for VPNs

From the SRC CLI, you can correct errors in extranet configuration when these errors result from directory or portal errors. In the extranet configuration, an extranet client of an object must be imported by that object.

In the SRC configuration for a subscriber that is the client of an extranet client, you specify a VPN for the imported extranet client. Typically, you add the extranet client and specify the imported extranet from the Enterprise Manager Portal. You can use the SRC CLI to verify the configuration and to make updates to the existing configuration.

To view information about extranet configuration and update it:

1. From configuration mode, access the configuration statement that represents the configuration for the VPN.
   [edit]user@host# edit subscribers retailer name vpn vpn-id

   or

   [edit]user@host# edit subscribers retailer name subscriber-folder folder-name enterprise name vpn vpn-id

   where vpn-id is the name of the routing instances on a device running Junos OS that implements the VPN.

2. View the configuration for the VPN. For example:

   [edit subscribers retailer Acme vpn 1234]
   user@host# show
   extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users,
    o=umc" "enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];

3. (Optional) Change or add the distinguished name (DN) of a retailer or an enterprise that is an extranet client of this VPN.
   [edit subscribers retailer name vpn vpn-id ]user@host# set extranet-client extranet-client

   For example:

   [edit subscribers retailer name vpn vpn-id ]user@host# set extranet-client enterpriseName=Acme2,ou=local,retailername=default, o=Users, o=umc

    

4. (Optional) Change or add extranets to be imported by specifying the DN of the extranet.
   [edit subscribers retailer name vpn vpn-id ]user@host# set imported-extranets imported-extranets

   You can specify one or more extranets.

5. Verify that the updated configuration is correct.

   [edit subscribers retailer name vpn 
   vpn-id
   ]
   user@host# show
   [edit subscribers retailer Acme vpn 1234]
   user@host# show
   extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users,
    o=umc" "enterpriseName=Acme2, ou=local, retailername=default, o=Users,
    o=umc""enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];