Installing Juniper into existing network

I have a problem that I have recently ran into. I may know the direction I need to take but would like to confirm it with any willing IT professionals.

I have a basic network implemented that Includes Cisco ASA 5510. I am working with Client that would like to install a Juniper for VPN access to them but I am not sure how to configure. I believe I need to setup a Layer 3 Switch after our ISP router, that would be installed in in between the current ASA and the new Juniper. I believe if I installed a Layer 3 switch I would need to create VLAN 1 to have the current network "outside port of the ASA" in port 1 and the new Juniper SSG's to be VLAN 2 on port 2.

If anyone can confirm or would need more information to lend advice I would greatly appreciate it.
andrewingAsked:
Who is Participating?
 
Sanga CollinsConnect With a Mentor Systems AdminCommented:
Hi andrewing,

If they have a juniper on their side, you do not have jump through many hoops. Just plug the juniper WAN port into your LAN, let it get a private IP, and then when building the VPN make sure on your side and the remote side that you have 'NAT traversal' checkbox checked. Finally on the cisco you would need to enable VPN pass through if needed.

I use this setup a lot for home users who have their own ISP router. It allows me to give them VPN access without having to disrupt their current network setup.

Please post if you have additional questions.
0
 
Sanga CollinsSystems AdminCommented:
If you decide to go with a switch between your ISP router and internal devices then you do not need to setup VLANs. All you need to do is configure one of your available public IPs on the Juniper WAN and no change required for the Cisco.
0
 
andrewingAuthor Commented:
Thank you for the response Sangamc. I thank you for the depth of your response. I am not sure why I would be thinking I would need a separate VLAN. They would have a Juniper on their side as well so I think the solution then would be Connecting WAN port to LAN and allowing VPN pass through on ASA.

Thank you again.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.