Pre-shared-key ascii-text '$9$RkbElM7Nb2oGVw. Mode aggressive # Must be aggressive, not main mode The resulting config from the wizard looks like this (ge-0/0/14 is my outside/untrust interface in this instance): ‘set security zone security-zone untrust host-inbound-traffic system-services http’ and the same again for https) Click Local Gateway icon in the topology to configure a local gateway. Complete the IPsec VPN configuration parameters according to the guidelines provided in Table 1 through Table 4. The Create Remote Access (NCP Exclusive Client) page is displayed.

• Be sure to permit HTTP and HTTPS inbound on the untrust zone (e.g. Responsible for configurations and support of internal and external clients, 3174,3172 controllers, NCP’s, VTAM switched major nodes, cross domain resources, various IBM and HP printers using. Click Create VPN > < Route Based > Remote Access NCP Exclusive Client.

‘set sys services web-management http interface ge-0/0/0’ and the same again for https)

The profile configuration menu is presented, select Add: In the new profile wizard window, select Manually configure profile and click Next.

You will need to enable the HTTP and HTTPS on the untrust interface (e.g. Configure the NCP VPN client Open the NCP user interface and select the Configuration tab.(This is based on the assumption that your SRX has a fairly default config, and your VPN clients are coming in on the ‘untrust’ zone): After I wrote this document, while I was playing with dynamic VPN on junos 10.4R6.5, I noticed that my vpn client cannot pass phase1 and it fails on IKE. Although the wizard is very good, it doesn’t do a couple of important things for you that are going to stop things working. There are a couple of things to watch out for though. Just managed to set up a Juniper Dynamic VPN using the web interface’s wizard in about half an hour – bonzer compared to the last time I did it at the CLI, which seemed to take two days.

Juniper ncp client