Route-Based IPsec VPN Configuration in Juniper SRX

In this video I am demonstrating how to configure route-based IPsec tunnel in Juniper SRX firewall, suitable for JNCIA-SEC/JNCIS-SEC candidates, firewall admins, Network security engineers and the technology enthusiastic folks.
Linkedin: / hongera

[@Jota_VA]

Thanks for sharing...It was really helpfull

[@mmahrusqusaeri1326]

what if we add the IP Address on st0.x interface, then there is p2p network between HQ & Branch tunnel. should we add static routing to the tunnel ?

[@HongeraGideon]

Yes, you can definitely do that, and you can also have a routing protocol like OSPF on the tunnel interfaces and share routes across sites.

[@dancestudio2865]

Hello Hongera, your explained very good on your video. Could please make tutorial for troubleshoot for srx device, including bgp, packet captures, traffic flow, IDS, IPS, DNAT, SNAT and logs?

[@ricktaylor903]

Great video ..!!

[@kevins6886]

Great video,, please upload more

[@ajayilekan3067]

Thank you for the great video, pls how can I get the srx firewall image for lab purpose. Looking forward to your response

[@HongeraGideon]

Hi Ajayi, thanks for stopping by, actually you can get it from support.juniper.net/support/downloads/

[@victorpalao747]

Thank you for the video! What device is the ISP? Please, can you pass me the proyect?

[@HongeraGideon]

That is a Cisco IOSv router.

[@PiyushSharma-fd3fq]

Do we need any firewall policy to ping the gateways?

[@HongeraGideon]

No, firewall policy is used for transit traffic, traffic destined to the device is controlled by host-inbound-traffic properties in zone settings.

[@kitesim8047]

Great

[@YasserJara]

hello what emulator is it? and has a version for mac ?... excellent video

[@HongeraGideon]

The emulator is EVE-NG Professional, you can run it as a vm inside VMware workstation or ESXI, thenks for stopping by.