Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Import IPsec VPNs

Juniper Security Director lets you import your existing large and complex VPN configurations into the portal. You do not have to re-create the same VPN environment to allow Juniper Security Director to manage it. During the VPN import operation, all vpn-related objects are also imported along with the VPN.

When you import a VPN, Juniper Security Director adds a new VPN to the VPN list with the name as ImportVPN_<number>.

At any point of the import workflow, you can choose to exit. All your settings and progress are discarded.

  1. Click Security > IPsec VPN Management > IPsec VPNs.
    The IPsec VPNs page is displayed.
  2. Click Import.
    The Import VPNs page is displayed.
  3. Select one or more devices from which the VPN configuration must be imported. You can use the filter option to perform a free-text search for the device name. If you do not select all the devices, the network topology discovery might vary. In such cases, other devices might be treated as extranet devices.
    Note:

    You can import VPN configurations only from individual devices in a multinode high availability (MNHA) pair.
    Note:

    Hover over Supported/unsupported items to view the supported VPN types and supported and unsupported VPN settings. Other unsupported settings are also displayed. But you can modify the features only using CLI.
  4. Click Next.

    The list of VPNs to be imported is displayed.

  5. Click Finish.

    A Job Status page opens displaying the details of the Import VPN job, such as the number of VPNs, the number of devices in each VPN, and the timestamp.

  6. Click OK.

The imported VPNs are displayed on the IPsec VPN page. The corresponding VPN profiles are listed on the VPN Profiles page.

If you made changes to an IPsec VPN directly on an SRX Series Firewall and want to reimport the changes to Juniper Security Director:

  1. Delete the IPsec VPN from Juniper Security Director only.

  2. Reimport the IPsec VPN from the SRX Series Firewall.

  3. Validate the configuration and then deploy the IPsec VPN.

This procedure prevents the creation of IPsec VPN name suffixes and avoids deployment conflicts that occurs when device-level changes are not properly reimported into Juniper Security Director.