Screen OS

Hi all. I have a question beginner.

We have the SSG 5. Remote clients can connect to our network via VPN getting IP address from SSG 5.

There is a branch, which also want to establish SSG 5.

Question: Can I configure VPN tunnel between two SSG 5 (two external network)?

At the same time it should not affect the performance of an existing VPN.

If this is possible - where you can read about it?

Thank you.

Hi,

You can configure another site-to-site VPN without affecting the performance of already existing VPN .

Please refer the below KB for various types of VPN config:

http://kb.juniper.net/KB22091

i want buy SSG 5 10 user license. This users limit affect in VPN site-to-site? Because if connet this SSG 5 as client - it will assigned additional IP address. Minus 1 license 😞

Yes, Licensing limit for configuring the VPN is counted for all VPNs. Let it be Client to Site or Site-to Site.

but 10-user limit - it is no VPN limit?

VPN limit is 24\40*. yes?

I am sorry, but the question is not very clear.

Could you please describe your  query briefly.

so...

this 10-user licence affect only in client ip-address in LAN?

and not affect to simple VPN and site-to-site  VPN?

How many exterlnal users can connetct to SSG5-10U via VPN? 25\40 ?

but, i don't bought device. beacuse i must know before buy...

i have't device...

Hi,

The base version of SSG5 supports 25 VPN. ( refer Datasheet)

http://www.juniper.net/us/en/products-services/security/ssg-series/#literature

I assume 10 User License that you are talking about is for VPN Client, rite ?

From the above two points we can say that these licenses are independent, in all SSG can support 25 Security Associations ( Including VPN from Clients).