Configuring remote IPSec VPN

[JamesG]

How do you configure remote vpn (roaming vpn) on ISG 1000 firmware 6.1.x.

I need to configure IPSec remote vpn like we do on Cisco vpn concentrator, and user should be authenticated on group and individual basis as well. It would be nice if one can provide complete configuration.

Is it possible to use Cisco VPN client with ISG IPSec VPN or one should use netscreen remote vpn client?

thx

[Raheel]

http://kb.juniper.net/kb/documents/public/resolution_path/J_FW_VPN_Config_or_Trblsh.htm

please check above link, will answer most of your questions.

thanks

Raheel Anwar

[DerMike]

... or use the standard Windows VPN client as described here ...

[michael.saw]

Can we use Junos Pulse here?

Does ISG1000/ISG2000, NS-5200/NS-5400 support dynamic user VPN?

[nikolay.semov]

I believe all ScreenOS devices support such VPNs.

[spuluka]

Can we use Junos Pulse here?

 No, Pulse is not an IPSEC client.  ScreenOS dynamic vpn is IPSEC based, so you need to configure a client using the same.

Does ISG1000/ISG2000, NS-5200/NS-5400 support dynamic user VPN? 

 ScreenOS comes with a 2 user dyanmic connection license.  You can add additional users by license and there is no restriction of branch versus datacenter as there is on the SRX.

[michael.saw]

Why doesn't all Junos Security Appliances support IPSec like what SSG do?

[Spud]

SRX devices do.

MAG devices are specifically SSL VPN devices, so naturally they (AFAIK) don't support IPSec, presumably for simplicity.

[michael.saw]

Is there a kb or doc link on configuring Remote user VPN on high-end SRX?

[spuluka]

Michael,

You are correct, dynamic vpn is only available on the branch SRX line not on the data center product.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB14318

Platforms Supported

Dynamic IPsec VPN is supported on the following devices, which have the Dynamic VPN Client License installed:

• SRX100 (Junos 10.0 and above)
• SRX210 (Junos 9.5 and above)
• SRX220
• SRX240 (Junos 9.5 and above)
• SRX650 (Junos 10.2 and above)

The pulse client can be used for SRX connections on some client platforms, but not on ScreenOS.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB21650

Not all versions of JUNOS Pulse support the Dynamic VPN IPSec client to a branch SRX.  At the time this KB was written, versions of JUNOS Pulse supported for Dynamic VPN are those running the following Operating Systems:

• Windows XP
• Windows Vista (32 bit and 64 bit)
• Window 7 (32 bit and 64 bit)

JUNOS Pulse on other operating systems (including iPhone, iPad, Android, Blackberry, Mac OS X) do not support IPSec with SRX branch devices.