Introduction

References

Document History

Glossary

Feature Specifications

• The feature would add Remote Access VPN support for SRX.
• SRX must servicing as Firewall service provider and VPN service provider.
• SRX should running with JunOS 10.4r1 or above.
• The feature is implemented using Dynamic-VPN technology of Juniper(refer to http://kb.juniper.net/InfoCenter/index?page=content&id=KB14318), so
  • It would only support Juniper property VPN client(which can be downloaded from SRX directly)
  • It would only support Windows XP, Vista or Windows 7
  • Other limitation of Juniper Dynamic-VPN on SRX including you may need to buy license from Juniper for more than 2 concurrent users.

Use cases

1. CS admin acquire a new public IP, in a network that SRX servicing
2. Admin enable Remote Access VPN on the IP.
3. Admin add VPN user to it.
4. VPN user open web browser in Windows, visit the above public IP, get the client and configuration.
5. VPN user connected to the network. And it's done.

Architecture and Design description

• The whole process maybe sightly different from VPN in VR case, since SRX would take care of all the configurations.

Web Services APIs

Reused the same API for Remote Access VPN on VR.

UI flow

• either demonstrate it visually here or link to relevant mockups

Appendix

Appendix A:

Appendix B: