[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring IPSec Services Interfaces

To configure an IPSec tunnel, you must configure the following services interfaces:

For the services to be applied, you must first define the logical interfaces to be used.

To configure IPSec inside services interfaces and outside services interfaces:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
  2. Perform the configuration tasks described in Table 106.
  3. Go on to Configuring IPSec Service Sets.

Table 106: Configuring IPSec Interfaces

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Interfaces level in the configuration hierarchy.

In the configuration editor hierarchy, select Interfaces.

From the top of the configuration hierarchy, enter

edit interfaces

Configure the inside services interface for the IPSec tunnel.

On the J-series Services Router, the services interface is always sp-0/0/0.unit. The logical interface must have a unit number other than 0. By default, J-Web Quick Configuration uses the unit number 1001 for inside-service logical interfaces.
  1. Next to Interface, click Add new entry.
  2. In the Interface name box, type sp-0/0/0, and click OK.
  3. In the Interface box, click sp-0/0/0.
  4. In the Unit box, click Add new entry.
  5. In the Interface unit number box, type 1001.
  6. In the Service domain box, select inside from the list.
  7. In the Family box, click inet.
  8. Select the Primary box, and click OK.
  1. Configure the services interface as an inside-service interface:

    set sp-0/0/0 unit 1001 service-domain inside

  2. Configure the services interface as an inet interface:

    set sp-0/0/0 unit 1001 family inet

Configure the outside services interface for the IPSec tunnel.

On the J-series Services Router, the services interface is always sp-0/0/0.unit. The logical interface must have a unit number other than 0. By default, J-Web Quick Configuration uses the unit number 2001 for outside-service logical interfaces.
  1. Next to Interface, click Add new entry.
  2. In the Interface name box, type sp-0/0/0, and click OK.
  3. Next to Interface, click sp-0/0/0.
  4. Next to Unit, click Add new entry.
  5. In the Interface unit number box, type 2001.
  6. In the Service domain box, select outside from the list.
  7. In the Family box, click inet.
  8. Select the Primary check box, and click OK.
  1. Configure the services interface as an outside-service interface:

    set sp-/0/0/0 unit 2001 service-domain outside

  2. Configure the services interface as an inet interface:

    set sp-0/0/0 unit 2001 family inet

[Contents] [Prev] [Next] [Index] [Report an Error]

[an error occurred while processing this directive]