[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring IPsec Services Interfaces

To enable IPsec on a Services Router, you must configure the services interfaces. In the Services Router, the service interface is always sp-0/0/0.unit. For the services to be applied, you must first define the logical interfaces to be used. The logical interface must have a unit number other than 0. By default, the J-Web interface uses the unit number 1001 for inside-service logical interfaces, and 2001 for outside-service logical interfaces.

To configure an IPsec tunnel, you must configure the following services interfaces:

To configure IPsec inside services interfaces and outside services interfaces:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor..
  2. Perform the configuration tasks described in Table 35.
  3. Go on to Configuring Service Sets.

Table 35: Configuring IPsec Service Interfaces

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Interfaces level in the configuration hierarchy.
  1. In the J-Web interface, select Configuration>View and Edit>Edit Configuration.
  2. Next to Interfaces, click Configure or Edit.

From the [edit] hierarchy level, enter

edit interfaces

Configure the inside services interface for the IPsec tunnel.

(See the interface naming conventions in the J-series Services Router Basic LAN and WAN Access Configuration Guide.)
  1. Next to Interface, click Add new entry.
  2. In the Interface name box, type sp-0/0/0, and click OK.
  3. In the Interface box, click sp-0/0/0.
  4. Next to Unit, click Add new entry.
  5. In the Interface unit number box, type 1001.
  6. In the Service domain box, select inside from the list.
  7. In the Family box, select the check box next to Inet and click Configure.
  8. Select the Primary check box, and click OK until you return to the Interfaces page.
  1. Configure the services interface as an inside-service interface:

    set sp-0/0/0 unit 1001 service-domain inside

  2. Configure the services interface as an inet interface:

    set sp-0/0/0 unit 1001 family inet

Configure the outside services interface for the IPsec tunnel.
  1. Next to Interface, click sp-0/0/0.
  2. Next to Unit, click Add new entry.
  3. In the Interface unit number box, type 2001.
  4. In the Service domain box, select outside from the list.
  5. In the Family box, select the check box next to Inet and click Configure.
  6. Select the Primary check box, and click OK.
  1. Configure the services interface as an outside-service interface:

    set sp-/0/0/0 unit 2001 service-domain outside

  2. Configure the services interface as an inet interface:

    set sp-0/0/0 unit 2001 family inet

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

[an error occurred while processing this directive]