It my SRX-210-config
JUNOS 10.3R1.9 built 2010-08-13
> show configuration security ike
proposal phase1-dynamic {
description gr2-3des-sha;
authentication-method pre-shared-keys;
dh-group group2;
authentication-algorithm sha1;
encryption-algorithm 3des-cbc;
}
policy andron-d-ike {
mode aggressive;
description andron-dynamic-ike;
proposals phase1-dynamic;
pre-shared-key ascii-text "$9$3.Wr6/tleW7Nbev2aGif51RESKM"; ## SECRET-DATA
}
gateway andron-ike-gw {
ike-policy andron-d-ike;
dynamic hostname andron12;
external-interface ge-0/0/0.0;
xauth access-profile radius-server;
}
> show configuration security ipsec
proposal phase2-dynamic {
description esp-3des-sha1;
protocol esp;
authentication-algorithm hmac-sha1-96;
encryption-algorithm 3des-cbc;
}
policy andron-ipsec-d {
description andron-ipsec-dynamic;
perfect-forward-secrecy {
keys group2;
}
proposals phase2-dynamic;
}
vpn andron-vpn {
ike {
gateway andron-ike-gw;
ipsec-policy andron-ipsec-d;
}
}
> show configuration access
profile radius-server {
authentication-order radius;
radius-server {
192.168.100.200 {
port 1812;
secret "$9$j/HP5Fn/uBICA7-bwg4Fn6CO1lKMWX7"; ## SECRET-DATA
timeout 5;
retry 10;
}
}
}
firewall-authentication {
web-authentication {
default-profile radius-server;
}
traceoptions {
flag all;
}
}
> show configuration security policies from-zone untrust to-zone trust
policy untrust-to-trust {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}
}
policy andron {
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
tunnel {
ipsec-vpn andron-vpn;
}
}
}
}
> show configuration interfaces
interface-range interfaces-trust {
member fe-0/0/2;
member fe-0/0/3;
member fe-0/0/4;
member fe-0/0/5;
member fe-0/0/6;
member fe-0/0/7;
}
ge-0/0/0 {
description "WAN. Gigabit Ethernet Interface 'ge-0/0/0'";
unit 0 {
description WAN;
family inet {
address x8.x10.73x.17x/22;
}
}
}
fe-0/0/7 {
description "To-Server. Fast Ethernet Interface 'fe-0/0/7'";
unit 0 {
description LAN-to-server;
family inet {
address 192.168.100.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 127.0.0.1/32;
}
}
}
> show configuration security dynamic-vpn
access-profile radius-server;
clients {
andron {
remote-protected-resources {
192.168.100.0/24;
}
remote-exceptions {
0.0.0.0/0;
}
ipsec-vpn andron-vpn;
user {
andron-radius;
}
}
}
It my RADIUS-users (freeradius2 server)
cat /etc/raddb/users
andron-radius Cleartext-Password := "123456"
Framed-IP-Address = 192.168.100.11,
Framed-IP-Netmask = 255.255.255.0
