IPSec Tunnel Help

[Juniper_Newbie]

I have 2 J-2350 appliances. I want to create an IPSec tunnel between the two of them. Big deal, right? I agree.

However, there is one caveat: the outside interface (external/public) will constantly change on one end. It will be portable and moved to different venues, so the IP address it gets from the ISP will always be different.

I may need to use certificates.

Where can i find info on how to configure ipsec using certs??

Thanks

[Juniper_Newbie]

However, there is one caveat: the outside interface (external/public) will constantly change on one end. It will be portable and moved to different venues, so the IP address it gets from the ISP will always be different.

I may need to use certificates.

Where can i find info on how to configure ipsec using certs??

Thanks

[rkim]

What JUNOS version are you using? Is it flow-based (enhanced services)? If so, go to app notes KB article here:

http://kb.juniper.net/KB10182

There is an app note for IPSec VPN with PKI certificates.

-Richard