Scribd Logo
Upload

Welcome to Scribd!

  • Site To Site VPN Config

    Uploaded by

    Sharad Pawar
    17 views11 pages
    The document outlines the steps to configure an IPSec VPN tunnel between a Palo Alto firewall and a Juniper SSG 20 firewall. It lists the configuration steps for both firewalls, which include creating IKE and IPSec crypto profiles, interfaces, zones, monitors, tunnels, static routes, and policies to establish the VPN connection between the two devices.

    Original Description:

    Original Title

    site to site vpn config

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document outlines the steps to configure an IPSec VPN tunnel between a Palo Alto firewall and a Juniper SSG 20 firewall. It lists the configuration steps for both firewalls, which include creating IKE and IPSec crypto profiles, interfaces, zones, monitors, tunnels, static routes, and policies to establish the VPN connection between the two devices.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    17 views11 pages

    Site To Site VPN Config

    Uploaded by

    Sharad Pawar
    The document outlines the steps to configure an IPSec VPN tunnel between a Palo Alto firewall and a Juniper SSG 20 firewall. It lists the configuration steps for both firewalls, which include creating IKE and IPSec crypto profiles, interfaces, zones, monitors, tunnels, static routes, and policies to establish the VPN connection between the two devices.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 11

    IPSec VPN Between Paloalto And SSG 20

    1/5-192.168.45.195
    1/5-192.168.45.195 0/0-192.168.45.147
    0/0-192.168.45.147
    Paloalto SSG 20

    1/3-192.168.80.1
    1/3- 192.168.80.1 Tunnel.1 Tunnel.1 0/1-10.10.10.10
    0/1-10.10.10.10
    20.0.0.2 20.0.0.1

    192.168.80.10 10.10.10.1
    10.10.10.1
    Step 1 – Create IKE Crypto Profile (phase I)
    Network>IKE Crypto>IKE Crypto Profile

    Step 2 – i) IKE Gateway


    Network>IKE Gateway>genral

    Step 2 – ii) Network>IKE Gateway > Advance


    Step 3 –IPSec Crypto (phase II)
    Network > IPSec Crypto

    Step 4 –Create Tunnel Interface


    Network > Interfaces > Tunnel

    Step 5 –Create Zones


    Network > Zones
    Step 6 –Create Monitor Profile
    Network > Monitor

    Step 7 – i) Create IPSec Tunnel


    Network > IPSec Tunnels > Genral

    Step 7 – ii) IPSec Tunnel Proxy Ids


    Network > IPSec Tunnels > Proxy Ids > IPV4
    Step 8 –Static Route
    Network > Virtual Routers > Static Route

    Step 9 – Create Policy for VPN


    Policies > Security
    Now configure Same VPN as Paloalto in Juniper SSG 20
    Step 1 –create P1 Proposal

    Step 2 –i) Define Gateway for P1

    Step 2 –ii)Advanced Configuration


    Step 3 –Create P2 Proposal

    Step 4 –Create Zones


    Step 5 –Create Tunnel Interface

    Step 6 –Routing
    Step 7 –AutoKey IKE P2
    Step 8 --Create Policy

    You might also like