SiePortal

The integrated platform for your product selection, buying and support workflow - bringing together Industry Mall and Online Support.

Products & Services
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
Support Support
{{(apiData.Support | filter:{'rank':1}:true)[0].title}} Support
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
MySiePortal MySiePortal
{{(apiData.MySiePortal | filter:{'rank':1}:true)[0].title}} MySiePortal
- Menu temporary not available
- Menue temporary not available
- {{item.title}}
Cart ({{apiData.CartCount}})

Navigation

I need help configure a vpn between MD741-1 and a Juniper firewall

1/28/2011 10:27 AM	Rate (0)
smunemo Member Joined: 1/27/2011 Last visit: 3/16/2011 Posts: 1 Rating: (0)	Hello, I need help configure a vpn between MD741-1 and a Juniper firewall. The idea is to connect up to 100 customers without using a scalance device. The WinCC servers and Database servers are behind the Juniper firewall. I have a test environment at the moment and the vpn tunnel is coming up. I have one laptop connected to the MD741-1 and another to the firewall. I cannot ping either laptop. I have doubled checked my firewall rules and routing on the Juniper and everthing looks ok. I have disabled firewall on XP laptops. I have also installed wireshark on the laptops. If I ping from a laptop connected to the MD741-1, traffic reaches the other laptop and sent back but the MD741-1 doesn't seem to accept it. I have also set firewall rules on the MD741-1 to accept any traffic. Any suggestions. Splitted from MD741-1.
	Last edited by: O_Moderator at: 1/28/2011 11:41 AM new subject after splitting
Suggestion To thank Quote Answer

1/29/2011 5:39 PM	Rate (0)
jklm Platinum Member Joined: 12/22/2006 Last visit: 1/25/2022 Posts: 1742 Rating: (309)	Hello, Be aware that you have firewall rules in the menu "Security" ==> "Packet filter", butyou could have some also in each VPN connection again (Edit Firewall rule for VPN Tunnel). The IPsec VPN connection is viewed as fundamentally secure. Thus data traffic over this connection is not limited by default. But check it to be sure. For each rule you can activate the logging. You could even add a rule "allow all" in the VPN connection with logging, just for testing. Because the answer from the pinged laptop can be dropped by the Juniper. IfJuniper doesnot dropped it, I expect the added "allow all" rule in the MD741 to tell that an ICMPreply came in.If Juniper drops it, no packet in the log file.
	Best regards jklm Suggestion was helpful? Feel free to rate it.
Suggestion To thank Quote Answer

Share this page:

Share this page on...