Installing Juniper into existing network

Posted on 2013-06-07
Medium Priority
Last Modified: 2013-06-07
I have a problem that I have recently ran into. I may know the direction I need to take but would like to confirm it with any willing IT professionals.

I have a basic network implemented that Includes Cisco ASA 5510. I am working with Client that would like to install a Juniper for VPN access to them but I am not sure how to configure. I believe I need to setup a Layer 3 Switch after our ISP router, that would be installed in in between the current ASA and the new Juniper. I believe if I installed a Layer 3 switch I would need to create VLAN 1 to have the current network "outside port of the ASA" in port 1 and the new Juniper SSG's to be VLAN 2 on port 2.

If anyone can confirm or would need more information to lend advice I would greatly appreciate it.
Question by:andrewing
  • 2
LVL 18

Accepted Solution

Sanga Collins earned 2000 total points
ID: 39230454
Hi andrewing,

If they have a juniper on their side, you do not have jump through many hoops. Just plug the juniper WAN port into your LAN, let it get a private IP, and then when building the VPN make sure on your side and the remote side that you have 'NAT traversal' checkbox checked. Finally on the cisco you would need to enable VPN pass through if needed.

I use this setup a lot for home users who have their own ISP router. It allows me to give them VPN access without having to disrupt their current network setup.

Please post if you have additional questions.
LVL 18

Expert Comment

by:Sanga Collins
ID: 39230464
If you decide to go with a switch between your ISP router and internal devices then you do not need to setup VLANs. All you need to do is configure one of your available public IPs on the Juniper WAN and no change required for the Cisco.

Author Comment

ID: 39230556
Thank you for the response Sangamc. I thank you for the depth of your response. I am not sure why I would be thinking I would need a separate VLAN. They would have a Juniper on their side as well so I think the solution then would be Connecting WAN port to LAN and allowing VPN pass through on ASA.

Thank you again.

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This article will step through configuring a SonicWALL appliance to utilize an internal DHCP server for Global VPN Client (GVC) hosts.  There are times when using an external (external to the SonicWALL) DHCP server, such as Windows Servers, isn’t pr…
When posting a question about a Cisco ASA, Cisco Router or Cisco Switch, it can aid diagnosis if a suitably sanitised copy of the config is provided. It is much better to leave as much of the configuration as original as possible, as it could be tha…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Free Data Recovery software is an advanced solution from Kernel Tools to recover data and files such as documents, emails, database, media and pictures, etc. It supports recovery from physical & logical drive after a hard disk crash, accidental/inte…
Suggested Courses

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question