ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
Virtual Private Networking Using IPsec
6-1
v1.0, July 2008
Chapter 6
Virtual Private Networking Using IPsec
This chapter describes how to use the IPsec virtual private networking (VPN) features of the
ProSafe Wireless-N VPN Firewall to provide secure, encrypted communications between your
local network and a remote network or computer.
This chapter contains the following sections:
•
“Configuring an IPsec VPN Connection using the VPN Wizard”
•
“Managing VPN Tunnel Policies”
•
“Creating a VPN Client Connection: VPN Client to SRXN3205”
•
“Manually Assigning IP Addresses to Remote Users (ModeConfig)”
•
“Extended Authentication (XAUTH) Configuration”
Configuring an IPsec VPN Connection using the VPN Wizard
Configuring a VPN tunnel connection requires that all settings and parameters on both sides of the
VPN tunnel match or mirror each other precisely, which can be a daunting task. The VPN Wizard
efficiently guides you through the setup procedure with a series of questions that will determine
the IPsec keys and VPN policies it sets up. The VPN Wizard will also set the parameters for the
network connection: Security Association, traffic selectors, authentication algorithm, and
encryption. The parameters used by the VPN wizard are based on the recommendations of the
VPN Consortium (VPNC), an organization that promotes multi-vendor VPN interoperability.
Tip:
When configuring VPN for a WAN port network, use the VPN Wizard to configure
the basic parameters and then edit the VPN and IKE Policy menus for the specific
VPN application, if necessary.