VPN高可用技术指南.pdf

Tech Note VPN Fail-Over Demo and Script Juan Pablo Pereira Sr. Technical Marketing Manager Sarah Sorensen Product Marketing Manager Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408 745 2000 or 888 JUNIPER Part Number: 552028-001 Apr 2004 Contents Introduction3 Equipment running 3 What is going to happen 3 Configuration 4 Steps: 5 Conclusion Error! Bookmark not defined. Copyright © 2004, Juniper Networks, Inc. Using Compound Signatures to Detect Complex Attacks Introduction The goal of this demo is to allow you to demonstrate the HA capabilities of the Juniper Networks integrated firewall/IPSec VPN product line. It will show how the Juniper Networks solutions not only have firewall session synchronization, but also IKE synchronization, to ensure, in the case of device failure, the VPN persists. Because of Juniper Networks IPSec VPN redundancy capabilities, when one device fails the other can take over without interruption to the VPN connections. This demo will also demonstrate the overall performance of the solution (even in HA mode Juniper Networks IPSec VPNs are still able to generate more than 40 tunnels per second). Equipment running In the marketing lab: Ixia 400T test equipment running IxVPN version 1.1.- The Ixia system is used generate VPN tunnels and is able to simulate up 12,000 IKE gateways. The Ixia