SRX

last person joined: 14 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX5400 SRX-RA1-5000 License

    Posted 04-06-2017 03:59

    Does SRX5400 box really support SSL remote access VPN capability?

     

    I can see following license can be ordered together with SRX5400.

    Remote Access VPN service: 5000 concurrent RA Users by using NCP Clients

     

    I couldn't see any Juniper document which says SRX high end boxes supports RA VPN.

     

    If some one use this feature on SRX5400, can you verify below knobs work in the box?

     

    "Dynamic-VPN user to be authenticated by Steel-Belted Radius and assigned IP address locally by SRX"

    https://kb.juniper.net/InfoCenter/index?page=content&id=KB20906&actp=METADATA



  • 2.  RE: SRX5400 SRX-RA1-5000 License
    Best Answer

    Posted 04-06-2017 04:18

    Hi,

     

    First of all the RA vpn support on HE boxes started from 15.1X49-D80 onwards and is only for NCP clients.

    So you would require license for the same on the SX devise.

    The ssl vpn on the SRX5400 hundred is not the exact ssl vpn however it is just to encapsulating the Ipsec inside https incase udp 500 and udp 4500 are blocked.

     

     

    regards,

    Guru Prasad



  • 3.  RE: SRX5400 SRX-RA1-5000 License

    Posted 04-06-2017 04:27

    Hi Guru,

     

    Thank you for the contribution.

     

    Please let me know, does SRX5400 support radius based authentication for RA users?

     

    I have another query regarding the GPRS support on SRX5400 platforms. How the authentication happen in GPRS protocol. Does it support radius based authentication for mobile users?

     

    Best Regards,

    Smartm



  • 4.  RE: SRX5400 SRX-RA1-5000 License

    Posted 04-06-2017 09:26

    I am 99% sure RA on HE SRX was not coming until 15.1X49-D100.... Lower end SRX has support as of D-80.



  • 5.  RE: SRX5400 SRX-RA1-5000 License

    Posted 04-16-2017 20:53

    Hi All,

    Please let me know, does SRX5400 support radius based authentication for RA users?

     

    Regards,

    Smartm