Configure IPsec to a Juniper SSG Firewall


This guide covers configuration an IPsec VPN between Peplink and Juniper SSG firewall. The example assumes the following settings:

IPsec VPN Settings

Peplink WAN IP Address Peplink LAN Network Juniper SSG WAN IP Address Juniper SSG LAN Network IPsec Phase 1 Authentication SHA-1 ISPEC Phase 1 Encryption AES-128 ISPEC Phase 1 DH Group 2 IPsec Phase 2 Authentication SHA-1 ISPEC Phase 2 Encryption AES-128 ISPEC Phase 2 PFS Group 2

Configure Juniper SSG firewall

Create IPsec VPN Profile

Goto Wizards > Route Based VPN to begin:
  1. Select local and remote
  2. Bind the tunnel to untrust
  3. Select LAN to LAN
  4. Select Local Static IP <> Remote Static IPjuniper-ipsec-x509-04d
  5. Enter remote IP address of Peplinkjuniper-ipsec-x509-04e
  6. Select 128 bit encryptionjuniper-ipsec-x509-04f
  7. Specify the local and remote networks of the IPsec VPNjuniper-ipsec-x509-04g
  8. Pass all protocols over VPN in both directionsjuniper-ipsec-x509-04h
  9. Set logging options as neededjuniper-ipsec-x509-04i
  10. Set Schedule to Nonejuniper-ipsec-x509-04j
  11. Click Next then Finish to complete VPN

Configure Peplink device

Create IPsec Profile

  1. Goto Network > Interfaces > IPsec VPN to create a new IPsec profile. Give the VPN a meaningful Name and enter the Remote Gateway IP , Remote Networks , and Preshared Key of the Juniper SSG. Select the matching Phase 1 and Phase 2 settings for VPN.
  2. Click Save and the IPsec configuration is now

Site to Site VPN problem(Dell SonicWALL TZ400 with PEPLINK580)
Configure VPN with PIA on Surf SOHO