Posts

Showing posts with the label VPN

IPSec VPN ( Route-based-VPN )

Image
   ## Hub Firewall set system host-name vSRX-1-HUB-FW set system root-authentication encrypted-password "$1$Ck/1H8ol$.wgjY7Q54JDYLt.8uJcKX0" set system syslog user * any emergency set system syslog file messages any any set interfaces ge-0/0/3 unit 0 family inet address 2.2.2.1/30 set interfaces ge-0/0/2 unit 0 family inet address 10.1.2.1/24 ### Step-2: Create security-zones and assign interface(s). Create address-book for Spoke & Hub LAN subnets. set security zones security-zone LAN interfaces ge-0/0/2.0 host-inbound-traffic system-services all set security zones security-zone WAN interfaces ge-0/0/3.0 host-inbound-traffic system-services all set security address-book global address WAN-1 10.1.0.0/23 set security address-book global address LAN-1 10.1.2.0/23 set security address-book global address-set SPOKE-LAN address WAN-1 set security address-book global address-set HUB-LAN address LAN-1 ### Step-3: Configuring IKE Phase-1 Parameters set security ike proposal IKE-PH...