[Prev][Next][Report an Error]

Configuring an IPsec Policy—Quick Configuration (Dynamic VPNs)

You can use J-Web Quick Configuration to quickly configure an IPsec policy.

Before You Begin

For background information, read:

  • "Dynamic Virtual Private Networks (VPNs)" chapter in the JUNOS Software Security Configuration Guide.

Figure 81 shows the Quick Configuration page where you can select an existing policy, or click Add to create a new one.

Figure 81: IPsec Policy Quick Configuration Page – Adding a Policy

IPsec Policy
Quick Configuration Page – Adding a Policy

Figure 82 shows the Quick Configuration page where you create a new IPsec policy.

Figure 82: IPsec Policy Quick Configuration Page – Configuring a Policy

IPsec Policy Quick
Configuration Page – Configuring a Policy

To configure an IPsec policy with Quick Configuration:

  1. Select Configuration>Quick Configuration>Dynamic VPN>IPsec Policy.
  2. Select the IPsec Policy tab if it is not selected.
  3. To modify an existing policy, click the appropriate link in the Name column to go to the policy’s configuration page. Or, select the policy from among those listed and click one of the following buttons:
  4. To configure a new IPsec policy, click Add.
  5. Fill in the options as described in Table 140.
  6. Click one of the following buttons:

Table 140: IPsec Policy Configuration Options

Field

Function

Action

IPsec Policy

Name

Name to identify the policy.

Enter a name.

Description

Description of the policy.

Enter a brief description of the policy.

Perfect Forward Secrecy

Method the device uses to generate the encryption key. Perfect Forward Secrecy generates each new encryption key independently from the previous key.

  • group1—Diffie-Hellman Group 1.
  • group2—Diffie-Hellman Group 2.
  • group5—Diffie-Hellman Group 5.

Select a method.

Proposal

None

Do not use a proposal.

Click None.

User Defined

Use up to four Phase 2 proposals that you previously defined. If you include multiple Phase 2 proposals in the IPsec policy, use the same Diffie-Hellman group in all of the proposals.

Click User Defined, select a proposal (or proposals) from the pop-up menu, and click Add.


[Prev][Next][Report an Error]