Configuring IPsec Rules

Navigate to the Services>Ipsec vpn level in the configuration hierarchy.

1. In the J-Web interface, select Configuration>View and Edit>Edit Configuration.
2. Next to Services, click Configure or Edit.
3. Next to Ipsec vpn, click Configure.

From the [edit] hierarchy level, enter

edit services ipsec-vpn

Configure an IPsec rule named ipsec-dynamic-rule to act on all input traffic.

1. Next to Rule, click Add new entry.
2. In the Rule name box, type ipsec-dynamic-rule.
3. In the Match direction box, select Input from the list.

Enter

set rule ipsec-dynamic-rule match-direction input

Configure a term—for example, term1, and a remote gateway—for example, 10.90.90.1.

Note: Because the rule applies to all traffic, you configure only the action (or then statement) for the term.

1. Next to Term, click Add new entry.
2. In the Term name box, type term1.
3. Next to Then, select the Yes check box and click Configure.
4. In the Remote gateway box, type 10.90.90.1.

1. Enter

   edit rule ipsec-dynamic-rule

2. Enter

   set term term1 then remote-gateway 10.90.90.1

Configure the IPsec rule ipsec-dynamic-rule to reference the IKE policy ike-dynamic-policy and the IPsec policy ipsec-dynamic-policy for the IPsec dynamic SA.

1. In the Sa choice box, select Dynamic.
2. Next to Dynamic, click Configure.
3. In the Ike policy box, type ike-dynamic-policy.
4. Click OK until you return to the main Configuration page.

1. Enter

   edit term term1.

2. Enter

   set then dynamic ike-policy ike-dynamic-policy ipsec-policy ipsec-dynamic-policy