L2TP VPN IKE Gateway issues on Juniper SSG5

Posted on 2011-05-04
Last Modified: 2012-05-11
To set up an L2TP VPN on a Juniper SSG5. Everything is working per the instructions I'm following, until I hit the stage where I am to create a user group and IKE gateway.

For building the L2TP VPN, I've generated and installed the certs, etc, and I'm at the stage where I create the user group and build the IKE Gateway.

I create a local user group (Objects > Users > Local Groups), leave it empty, and that works fine, but when I go to create the IKE gateway (VPNs > AutoKey Advanced > Gateway), and select "Dialup User Group" as instructed, the group drop-down menu to the right doesn't display the new group I created as an option (there are no options, it only displays "None"), and when I attempt to save the IKE gateway without a group, I get the following error:

Cannot find the dialup user "?"
fail set dial-up gateway
Error in set ike gateway.

Does anyone have any idea why a user group I created (in Objects > Users > Local Groups) would not appear as an option when creating an IKE gateway?

Thank you very much in advance for your assistance.
Question by:VLib

    Accepted Solution

    FYI, this is resolved. It turns out that you have to have at least one user of a proper type (IKE and/or L2TP) added to the group before it can be selected in the section described.

    Author Closing Comment

    Because it is the solution.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
    Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now