Configuring IPSec VPN Global Settings in J-Web (Standard VPNs)

You can use J-Web Configuration to quickly configure VPN global settings.

Before You Begin

For background information, read

  • "Internet Protocol Security (IPsec)" chapter in the Junos OS Security Configuration Guide.

To access IPsec VPN using J-Web:

  1. Select Configure>IPSec VPN>Global Settings.

    The details of the pane are described in :Table 63

  2. Click one:
    • To apply changes to the configuration, click Save.
    • To reset the configuration without saving changes, click .Reset.

Table 63: VPN Global Configuration Options

Field

Function

Action

IKE Global Settings

Response Bad SPI

Enable response to invalid IPsec Security Parameter Index (SPI) values. If the SAs between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized.

Click the check box if you want the device to respond to IPsec packets with bad SPI values.

Maximum Responses

Number of times to respond to invalid SPI values per gateway

Enter a value between 1 and 30. The default is 5. Disabled by default.

IPsec Global Settings

VPN Monitor Options

Configure VPN monitoring options.

Click the check box if you want the device to monitor VPN liveliness.

Interval

Interval at which to send ICMP requests to the peer.

Enter a value from 1 through 36,000 seconds.

Threshold

The number of consecutive unsuccessful pings before the peer is declared unreachable.

Enter a value from 1 through 65,536.