juniperGUI配置的学习.docVIP

IPsec配置步骤： 1. 建立用户 Objects-Users-Local-New pbr@? 2、 建立VPN网关 依次选择VPNs-AutoKey Advanced-Gateway-New， Remote gateway 类型是 dialup user。 IKEv2 Auth Method 是 preshare. 设置 第一阶段安全参数。 3、 建立AutoKey IKE 依次选择VPNs-AutoKey IKE-NEW 定义 阶段 二的安全参数。 4、 建立内部地址池 依次选择-Policy-Policy Elements-Addresses-List 5、 建立VPN策略 依次选择Policy-Policies， 8、 建立认证用户 依次选择Objects-Users-Local-New 设置 认证密码。 Network interfaces Interface Name: (Read-only) A physical interface name includes the media type, slot number (for some devices), and port number (for example, ethernet3/2 or ethernet2). Static IP: (Some devices only) Select this option to assign a unique and fixed Internet Protocol (IP) address to the interface. IP Address/Netmask: Enter the IP address and netmask of the interface. Manageable: Select this option to enable management of the device using the interface IP address. Manage IP: The logical IP address through which you can manage the device. You can set a different manage IP address on each available interface. The manage IP address must be on the same subnet as the physical IP address. Interface Mode: (Appears only when you enter and save a static IP address and netmask) Select NAT so that the IP addresses of the devices on this interface have private, nonroutable IP addresses. Select Route so that the IP addresses of the devices on this interface have public, routable IP addresses. NAT is the default. Note: Interface-based NAT applies only to traffic sent to the Untrust zone. To use NAT for traffic sent to other zones, you must specify it in a policy. For more information about operational modes such as NAT, Route, or Transparent, see Operational Modes. Block Intra-Subnet Traffic: (available only for tunnel interfaces with an IP address/netmask) Select this check box to block traffic that exits the same interface that it entered. G-ARP: Select this option to allow incoming gratuitous ARP requests and replies on this interface. Note: G-ARP selection is not supported on lo