?
Solved

Installing Juniper into existing network

Posted on 2013-06-07
3
Medium Priority
?
437 Views
Last Modified: 2013-06-07
I have a problem that I have recently ran into. I may know the direction I need to take but would like to confirm it with any willing IT professionals.

I have a basic network implemented that Includes Cisco ASA 5510. I am working with Client that would like to install a Juniper for VPN access to them but I am not sure how to configure. I believe I need to setup a Layer 3 Switch after our ISP router, that would be installed in in between the current ASA and the new Juniper. I believe if I installed a Layer 3 switch I would need to create VLAN 1 to have the current network "outside port of the ASA" in port 1 and the new Juniper SSG's to be VLAN 2 on port 2.

If anyone can confirm or would need more information to lend advice I would greatly appreciate it.
0
Comment
Question by:andrewing
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Sanga Collins earned 2000 total points
ID: 39230454
Hi andrewing,

If they have a juniper on their side, you do not have jump through many hoops. Just plug the juniper WAN port into your LAN, let it get a private IP, and then when building the VPN make sure on your side and the remote side that you have 'NAT traversal' checkbox checked. Finally on the cisco you would need to enable VPN pass through if needed.

I use this setup a lot for home users who have their own ISP router. It allows me to give them VPN access without having to disrupt their current network setup.

Please post if you have additional questions.
0
 
LVL 18

Expert Comment

by:Sanga Collins
ID: 39230464
If you decide to go with a switch between your ISP router and internal devices then you do not need to setup VLANs. All you need to do is configure one of your available public IPs on the Juniper WAN and no change required for the Cisco.
0
 

Author Comment

by:andrewing
ID: 39230556
Thank you for the response Sangamc. I thank you for the depth of your response. I am not sure why I would be thinking I would need a separate VLAN. They would have a Juniper on their side as well so I think the solution then would be Connecting WAN port to LAN and allowing VPN pass through on ASA.

Thank you again.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will step through configuring a SonicWALL appliance to utilize an internal DHCP server for Global VPN Client (GVC) hosts.  There are times when using an external (external to the SonicWALL) DHCP server, such as Windows Servers, isn’t pr…
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
Integration Management Part 2
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses
Course of the Month15 days, 2 hours left to enroll

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question