Configuring an IKE Policy—Quick Configuration (Dynamic VPNs)

You can use J-Web Quick Configuration to quickly configure an IKE policy.

Before You Begin
For background information, read: "Dynamic Virtual Private Networks (VPNs)" chapter in the JUNOS Software Security Configuration Guide.

Before You Begin

For background information, read:

"Dynamic Virtual Private Networks (VPNs)" chapter in the JUNOS Software Security Configuration Guide.

Figure 3 shows the Quick Configuration page where you can select an existing proposal, or click Add to create a new one.

Figure 3: IKE Policy Quick Configuration Page – Adding a New Policy

IKE Policy Quick
Configuration Page – Adding a New Policy

Figure 4 shows the Quick Configuration page where you create a new IKE policy.

Figure 4: IKE Policy Quick Configuration Page – Configuring a Policy

IKE Policy Quick
Configuration Page – Configuring a Policy

To configure an IKE policy with Quick Configuration:

Select Configuration>Quick Configuration>Dynamic VPN>IKE.
Select IKE Policy tab if it is not selected.
To modify an existing policy, click the appropriate link in the Name column to go to the policy’s configuration page. Or, select the policy from among those listed and click one of the following buttons:
- To apply the configuration, click Apply.
- To delete the configuration, click Delete.
To configure a new IKE policy, click Add.
Fill in the options as described in Table 2.
Click one of the following buttons:
- To apply the configuration, click OK.
- To cancel the configuration, click Cancel.

Table 2: IKE Policy, Authentication, and Proposal Options

Field	Function	Action
IKE Policy
Name	Name to identify the policy.	Enter a name.
Description	Description of the policy.	Enter a brief description of the policy.
Mode	Specifies how participants should exchange encryption and authentication information during Phase 1 tunnel negotiations. The dynamic VPN feature only uses aggressive mode, which transfers the information between participants in two exchanges.	No action is required. The device displays this information for informational purposes only.
Pre-shared Key
Pre-shared key	Use one of the following preshared key types: ASCII text Hexadecimal	Click Pre shared key, click the type of key, and enter the key in the appropriate format.
Proposal
None	Do not use proposals	Click None.
User Defined	Use up to four Phase 1 proposals that you previously defined. If you include multiple Phase 1 proposals in the IKE policy, use the same Diffie-Hellman group in all of the proposals.	Click User Defined, select a proposal (or proposals) from the pop-up menu, and click Add.