Juniper Basic Setting

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen

Sysinfo

  • get sys

Interface setting

  • set interface untrust ip 10.84.252.41/24
  • set interface untrust gateway 10.84.252.1
  • set interface trust ip 10.83.41.1/24
  • set route 10.81.0.0/16 interface trust gateway 10.83.41.254
  • set dns host dns1 10.84.252.1

Admin setting

  • set admin name root
  • set admin name root
  • save

Vpn

Define own proposals

  • set ike p1-proposal aes256-sha1-modp1536 preshare group5 esp aes256 sha-1 hours 3
  • set ike p2-proposal aes256-sha1-modp1536 group5 esp aes256 sha-1 hours 1

Set networks

  • set address trust juniper-net 10.83.41.0/24
  • set address untrust gustavo-net 10.83.41.0/24

Set phase 1

  • set ike gateway gustavo address 10.84.252.33 main outgoing-interface untrust preshare suxer proposal aes256-sha1-modp1536
  • set vpn juniper2gustavo gateway gustavo sec-level compatible