Example: Creating a Dynamic VPN Client Configuration (CLI)

In this example, you configure the device to protect the 10.100.100.0/24 resource, but specify that the 0.0.0.0./0, 1.1.1.1/24, and 0.0.0.0/32 resources are exempt. You specify that the dynamic VPN feature should use the ipsec-config VPN configuration to create the VPN tunnel. In addition, you add johndoe and janedoe to the list of users who can download the client.

To create a client configuration using the CLI editor:

user@host# set security dynamic-vpn clients config1 remote-protected-resources 10.100.100.0/24user@host# set security dynamic-vpn clients config1 remote-exceptions 0.0.0.0/0, 1.1.1.1/24, 0.0.0.0/32 user@host# set security dynamic-vpn clients config1 ipsec-vpn ipsec-configuser@host# set security dynamic-vpn clients config1 user johndoe, janedoe

Related Topics