Junos OS

last person joined: 6 days ago 

Ask questions and share experiences about Junos OS.
  • 1.  J2320 12.1X44 Dynamic VPN not supported?

    Posted 12-14-2014 13:20

    Hi,

     

    Trying to figure out why I can't configure dynamic vpn on a J2320 with domestic 12.1X46-D10.2 - or any other junos version that I've tried from 9.4 and above.

     

    From the Dynamic VPN Configuration guide it looks like only the SRX platform is supported, but in the J Series Datasheet is says that "Dynamic remote access VPN" is supported on the J2320.

     

    When editing security in jweb or from the cli I don't see the dynamic-vpn command under security at all.  However, I do see various dynamic vpn instructions in the IPSec Phase I and Phase II configurations, but I'm hoping for the true dynamic-vpn settings so I can VPN via SSL with Pulse.

     

    Can someone please explain and let me know how to enable dynamic-vpn if it's supported?

     

    Thanks in advance,

    Jay



  • 2.  RE: J2320 12.1X44 Dynamic VPN not supported?
    Best Answer

    Posted 12-15-2014 13:05

    Dynamic VPN is only supported on the Branch SRX. In addition, I believe the J-Series is no longer supported or sold.

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB14318



  • 3.  RE: J2320 12.1X44 Dynamic VPN not supported?

    Posted 12-15-2014 20:38

    Thank you for confirming, appreciate it.  It's a bummer that the J2320 data sheet shows support for "Dynamic remote access VPN" on the J2320 but it doesn't mean the same thing as "Dynamic VPN" on an SRX :-(.

     

    Would you happen to have any links to configuration examples for a regular phase I / phase 2 remote access client VPN configuration that will work on a J2320 or some tips to help me get it figured out?  Haven't had any luck finding any good examples and the jweb interface for VPN features isn't very intuitive and not helping me transition from Cisco!  And I think that the Shrew VPN client may work, but I'd like to also confirm what client(s) will work and how to set them up properly.

     

    Thanks again,

    Jay.

     



  • 4.  RE: J2320 12.1X44 Dynamic VPN not supported?

    Posted 12-15-2014 21:17

    Looks like I may have found the correct document that works with my J2320.  All done with the point-and-click CLI so it's very straight forward.  That will help me figure out the terminology used in the Ph1/Ph2 GUI.

     

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB10177

     

    Jay.

     



  • 5.  RE: J2320 12.1X44 Dynamic VPN not supported?

    Posted 12-15-2014 21:23
    Awesome!!