| Main documentation | Link |
IPsec VPN Topologies on SRX Series Devices | |
|---|---|
| Site-to-site VPNs | |
| Hub-and-spoke VPNs | |
| Remote access VPNs or end-to-site tunnel or dial-up VPN | Dynamic VPNs with Pulse Secure Clients (IPsec only?) Remote Access VPNs with NCPe ( IPsec and IPsec over SSL) Juniper Secure Connect ( client-based SSL-VPN ) |
Policy-Based VPNs and Route-Based VPNs | |
IPsec Protocol: https://www.juniper.net/documentation/en_US/junos/topics/reference/general/ipsec-protocols-solutions.html
IPsec VPN Technologies and Solutions ( Video training)
https://juniper.csod.com/LMS/Video/LaunchVideo.aspx?loid=d7804270-0221-4b75-a8b8-7a65e26933e6
SRX & J Series Site-to-Site VPN Configuration Generator: https://www.juniper.net/support/tools/vpnconfig/#localSite
AutoVPN Feature Guide ( multi-remote site): https://www.juniper.net/documentation/en_US/junos12.1x46/information-products/pathway-pages/security/security-vpn-autovpn.html#configuration
Dynamic VPN (Remote access VPN or IPsec VPN client) : https://www.juniper.net/documentation/en_US/junos12.1x46/information-products/pathway-pages/security/security-vpn-dynamic.html#overview
Phase 1: AGGRESSIVE Mode Vs Main Mode:
Aggressive mode
takes part in fewer packet exchanged = is faster than Main mode.
does not give identity protection of the two IKE peers, unless digital certificates are used. This means VPN peers exchange their identities without encryption (clear text)