Download Junos OS IPsec for Security Devices

IPsec for Security Devices
Figure 13: Route-Based VPN Topology
Trust zone
192.168.168.10/24
SSG Series device
e0/6
192.168.168.1/24
Chicago
e0/0
2.2.2.2/30
Untrust
zone
tunnel1
10.11.11.11/24
VPN-chicago zone
Internet
SRX Series device
ge-0/0/3.0
1.1.1.2/30
Sunnyvale
ge-0/0/0.0
10.10.10.1/24
st0.0
10.11.11.10/24
VPN-chicago zone
Trust zone
10.10.10.10/24
In this example, you configure interfaces, an IPv4 default route, security zones, and
address books. Then you configure IKE Phase 1, IPsec Phase 2, security policy, and
TCP-MSS parameters. See Table 7 on page 53 through Table 11 on page 54 for specific
configuration parameters used in this example.
52
Copyright © 2014, Juniper Networks, Inc.