Juniper SRX Series

Chapter 10. IPsec VPN

The SRX product suite combines the robust IP Security virtual private network (IPsec VPN) features from ScreenOS into the legendary networking platform of Junos. IPsec VPNs have become a central component of modern computer networks for securing the data between different sites and remote users. As more critical applications and sensitive information have been transferred into electronic format, the demand to secure this information has grown. IPsec VPNs are sometimes confused with Layer 2 or Layer 3 VPNs, which do not actually encrypt the data, but rather tunnel the traffic that flows through the VPNs; however, IPsec VPNs are VPNs that provide encryption and authentication to secure traffic.

There are two high-level uses for IPsec VPNs: to secure data between two or more computer networks and to secure data between a remote user and a computer network. This chapter details the technologies behind both site-to-site and remote access VPNs and how these technologies are implemented on the SRX. There has also been a great deal of development when it comes to new IPsec features since Junos Security, so we examine some of these new features and how they can improve the functionality that the SRX has to offer when it comes to IPsec. After a thorough discussion of the technology and the implementation of the IPsec VPNs on the SRX, we examine verification and troubleshooting features and conclude with some case studies to provide you with a few real-world implementation ...