Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Installing Juniper into existing network

Posted on 2013-06-07
3
Medium Priority
?
436 Views
Last Modified: 2013-06-07
I have a problem that I have recently ran into. I may know the direction I need to take but would like to confirm it with any willing IT professionals.

I have a basic network implemented that Includes Cisco ASA 5510. I am working with Client that would like to install a Juniper for VPN access to them but I am not sure how to configure. I believe I need to setup a Layer 3 Switch after our ISP router, that would be installed in in between the current ASA and the new Juniper. I believe if I installed a Layer 3 switch I would need to create VLAN 1 to have the current network "outside port of the ASA" in port 1 and the new Juniper SSG's to be VLAN 2 on port 2.

If anyone can confirm or would need more information to lend advice I would greatly appreciate it.
0
Comment
Question by:andrewing
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Sanga Collins earned 2000 total points
ID: 39230454
Hi andrewing,

If they have a juniper on their side, you do not have jump through many hoops. Just plug the juniper WAN port into your LAN, let it get a private IP, and then when building the VPN make sure on your side and the remote side that you have 'NAT traversal' checkbox checked. Finally on the cisco you would need to enable VPN pass through if needed.

I use this setup a lot for home users who have their own ISP router. It allows me to give them VPN access without having to disrupt their current network setup.

Please post if you have additional questions.
0
 
LVL 18

Expert Comment

by:Sanga Collins
ID: 39230464
If you decide to go with a switch between your ISP router and internal devices then you do not need to setup VLANs. All you need to do is configure one of your available public IPs on the Juniper WAN and no change required for the Cisco.
0
 

Author Comment

by:andrewing
ID: 39230556
Thank you for the response Sangamc. I thank you for the depth of your response. I am not sure why I would be thinking I would need a separate VLAN. They would have a Juniper on their side as well so I think the solution then would be Connecting WAN port to LAN and allowing VPN pass through on ASA.

Thank you again.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question