{"id":641,"date":"2012-03-01T00:00:00","date_gmt":"2012-03-01T00:00:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2012\/03\/01\/juniper-srx-route-based-vpn\/"},"modified":"2023-01-15T22:55:20","modified_gmt":"2023-01-15T22:55:20","slug":"juniper-srx-route-based-vpn","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Firewalls\/Juniper\/juniper-srx-route-based-vpn.html","title":{"rendered":"Juniper SRX – How to configure a route based VPN"},"content":{"rendered":"

Below shows the necessary steps\/commands to create a route based VPN on a Juniper SRX series gateway.<\/p>\n

The main difference with a route based VPN is that a tunnel interface is created and assigned to your external interface. Any traffic that you wish to encrypt is routed to this tunnel interface. Access to and from the VPN is then controlled via the use of a policy.<\/p>\n

Note :<\/strong><\/em> For troubleshooting steps please see here<\/a><\/p>\n

This VPN is configured with the following :<\/p>\n

Remote Endpoint<\/strong> :<\/strong> 172.16.200.0\/24
\nLocal Endpoint\u00a0\u00a0\u00a0 : <\/strong>172.16.100.0\/24
\nPhase 1 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 : <\/strong> AES-256,SHA1, DH2
\nPhase 2 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 :\u00a0<\/strong>ESP, SHA1, AES-256<\/p>\n

\n

Table of Contents<\/p>\n