NETSCREEN远程访问VPN的简单配置

《NETSCREEN远程访问VPN的简单配置》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、窗体顶端NETSCREEN远程访问VPN的简单配置一、网络结构假如有一远程客户端，安装了NETSCREEN-REMOTE软件，通过拨号连接到INTERNET。通过与NETSCREEN防火墙建立VPN连接，访问公司内部网络。网络拓扑图如下二、NETSCREEN防火墙配置（WEBUI）1、创建一个拨号用户帐号ClickObjects>Users>Local2、ClickNew1.Username:自定义2.Status:Enable3.ClickIKEUser4.NumberofMultipleLogins:15.C

2、lickSimpleIdentity6.IKEIdentity:自定义7.ClickOK3、创建拨号VPN组ClickObjects>UserGroups>Local4、lickNew1．GroupName:自定义将相应的用户添加到用户组当中2．ClickOK5、创建Phase1IKENegotiation:ClickVPNs>AutoKeyAdvanced>Gateways6、ClickNew1．GatewayName:DialupGW(自定义)2．SecurityLevel:ClickCustom3．Clic

3、kDialupUserGroup4．Group:SelectUserGroup5．PresharedKey:netscreen6．OutgoingInterface:外网接口7．ClickAdvancedi.Phase1Proposal:pre-g2-3des-md5ii.Mode(Initiator):Aggressiveiii.ClickReturn8．ClickOK7、建Phase2IKENegotiation:ClickVPNs>AutoKeyIKE8、ClickNew1．VPNName:DialupVP

4、N2.SecurityLevel:ClickCustom3．RemoteGateway:Predefined4．SelectDialupGWforthePredefinedRemoteGateway5．ClickAdvancedi.Phase2Proposal:g2-esp-3des-md5ii.ClickReturn5．ClickOK9、创建DialUpVPNPolicy:ClickPolicies10、SelectFromUntrust11、SelectFromTrust12、ClickNew1．Source

5、Address:AddressBook:SelectDial-UpVPN2．DestinationAddress:ClickNewAddress:内网网段3．Service:Any4．Action:Tunnel5．Tunnel:DialupVPN6．ClickPositionatTop7．ClickOK三、配置客户端软件1、一个新的连接策略，命名为dial-up2、添加远程子网和远程网关IDType:IPlSubnetSubnet:172.16.10.0lNetmask:255.255.255.0lClicklC

6、onnectusingSecureGatewayTunnelIDType:IPAddress:1.1.1.1l3、编辑连接属***1、ClickSecurityPolicy1．SelectPhase1NegotiationMode:Aggressive2．SelectEnablePerfectForwardSecrecy(PFS)3．PFSKeyGroup:Diffie-HellmanGroup24．De-select"EnableReplayDetection"2、ClickMyIdentity1．Select

7、Certificate:None2．IDType:Emailaddress:user1@netscreen.com3．ClickPre-SharedKey1.ClickEnterKey1.enterthePre-sharedkeynetscreen2.lickOK3、expandSecurityPolicy1．ExpandAuthentication(Phase1)1．SelectProposal11.EncryptionAlg:TripleDES2.HashAlg:MD53.SALife:Unspecified

8、4.KeyGroup:Diffie-HellmanGroup22.ExpandKeyExchange(Phase2)1.SelectProposal11.EncryptAlg.TripleDES2.HashAlg.MD53.Encapsulation:Tunnel在windows中拨号到netscreen的vpn配置方式在ScreenOS端的设置一、设置L2TP用户1.O