Solved

Installing Juniper into existing network

Posted on 2013-06-07
3
417 Views
Last Modified: 2013-06-07
I have a problem that I have recently ran into. I may know the direction I need to take but would like to confirm it with any willing IT professionals.

I have a basic network implemented that Includes Cisco ASA 5510. I am working with Client that would like to install a Juniper for VPN access to them but I am not sure how to configure. I believe I need to setup a Layer 3 Switch after our ISP router, that would be installed in in between the current ASA and the new Juniper. I believe if I installed a Layer 3 switch I would need to create VLAN 1 to have the current network "outside port of the ASA" in port 1 and the new Juniper SSG's to be VLAN 2 on port 2.

If anyone can confirm or would need more information to lend advice I would greatly appreciate it.
0
Comment
Question by:andrewing
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Sanga Collins earned 500 total points
ID: 39230454
Hi andrewing,

If they have a juniper on their side, you do not have jump through many hoops. Just plug the juniper WAN port into your LAN, let it get a private IP, and then when building the VPN make sure on your side and the remote side that you have 'NAT traversal' checkbox checked. Finally on the cisco you would need to enable VPN pass through if needed.

I use this setup a lot for home users who have their own ISP router. It allows me to give them VPN access without having to disrupt their current network setup.

Please post if you have additional questions.
0
 
LVL 18

Expert Comment

by:Sanga Collins
ID: 39230464
If you decide to go with a switch between your ISP router and internal devices then you do not need to setup VLANs. All you need to do is configure one of your available public IPs on the Juniper WAN and no change required for the Cisco.
0
 

Author Comment

by:andrewing
ID: 39230556
Thank you for the response Sangamc. I thank you for the depth of your response. I am not sure why I would be thinking I would need a separate VLAN. They would have a Juniper on their side as well so I think the solution then would be Connecting WAN port to LAN and allowing VPN pass through on ASA.

Thank you again.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

When posting a question about a Cisco ASA, Cisco Router or Cisco Switch, it can aid diagnosis if a suitably sanitised copy of the config is provided. It is much better to leave as much of the configuration as original as possible, as it could be tha…
Hello All, I have been training on Multicast for a while now and whenever I start the topic , I find out that my friends /  Colleagues mention that they do not know how to test Multicast Joins. As most of the multicast would be video traffic and …
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now