SRX Services Gateway
Highlighted
SRX Services Gateway

Auto Connect VPNs on SRX

11.02.10   |  
‎11-02-2010 11:21 AM

Hi All,

 

I need to know how to configure AC-VPNs on SRX 240. I have done this on screen os and its working fine.

I want to test this on SRX before implementing. If somebody can help me on the same.

 

Thanks,

Suez

9 REPLIES
SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.02.10   |  
‎11-02-2010 02:36 PM

Hi,

 

as far i know, AC-VPN is not currently available on SRX.

i think it`s on the roadmap.

 

Please correct me , if i`m wrong.

 

Regards

 

 

-PIccolo
SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.02.10   |  
‎11-02-2010 11:08 PM

If you're talking about a site to site vpn, you just need to set "establish-tunnels immediately" under security/ipsec/vpn <vpn name>

SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.03.10   |  
‎11-03-2010 12:20 AM

AC-VPN is not available on SRX devices currently.

SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.03.10   |  
‎11-03-2010 10:55 PM

Hii All,

 

Thanks for your response. Juniper should come up with ACVPN on SRX at the earliest..

 

Thanks,

Suez

SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.04.10   |  
‎11-04-2010 05:20 AM

Suez,

 

take a look at Group VPN. It's Juniper's implementation of GDOI, interoperable with Cisco's GetVPN implementation. SonicWall has a Group VPN implementation, too, though I don't know that it's been tested for interop.

 

I think a standards-based approach like GroupVPN is much better than a proprietary approach like AC VPN.

 

For Group VPN, use JunOS 10.2r3 or better (10.3r2, 10.4rx), and remember that Group VPN is not supported in chassis clusters as of 10.2/10.3.

 

SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.07.10   |  
‎11-07-2010 12:09 AM

Hi Tbehrens,

 

I found few documents on the juniper site regarding Group VPN, i couldn't find the proper steps which described how to configure step by steps procedure.

Please, if you could share any link towards the same, it wil be a great help.

 

Thanks,

Suez

SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.08.10   |  
‎11-08-2010 11:59 AM

Maybe this configuration example is helpful, though it is specific to server-member colocation:

 

https://www.juniper.net/techpubs/software/junos-security/junos-security10.2/junos-security-swconfig-...

 

 Beyond that, there are a lot of individual Group VPN topics on the overview, server/member, phase 1 and phase 2, and a run-down of the steps needed to configure Group VPN:

 

http://www.juniper.tw/techpubs/software/junos-security/junos-security10.2/junos-security-swconfig-se...

 

http://www.juniper.tw/techpubs/software/junos-security/junos-security10.2/junos-security-swconfig-se...

 

SRX Services Gateway

Re: Auto Connect VPNs on SRX

11.10.10   |  
‎11-10-2010 03:23 AM

Thanks for your help

SRX Services Gateway

Re: Auto Connect VPNs on SRX

02.24.11   |  
‎02-24-2011 10:20 AM

How about HA? Does it support HA with Group VPN. I read introduction to GROUP VPN at it says working in STANDALONE mode.