• December 17, 2018, 03:30:01 PM
Welcome, Guest. Please login or register. Registration is free.
Did you miss your activation email?

Author Topic: Are you doing GDOI (Group VPN)  (Read 5129 times)

0 Members and 1 Guest are viewing this topic.

Offline TheKingSlacker

  • Rookie
  • **
  • Posts: 15
Are you doing GDOI (Group VPN)
« on: October 23, 2010, 04:36:15 PM »

I'm working on a plan to replace our Contivity 2600/1010 VPN network with Juniper SRXs (240/210) and I have a couple of questions:
  • Are you using GDOI (Group VPN) to mesh your sites?
  • Did you run into any unexpected issues with deployment of the SRXs?
  • Are you using NSM to manage your device or are you using or going to use Junos Space?
  • Any words of wisdom related to the SRX?

Thanks in Advance..


Offline Michael McNamara

  • Administrator
  • Hero Member
  • *****
  • Posts: 3838
    • michaelfmcnamara
    • Michael McNamara
Re: Are you doing GDOI (Group VPN)
« Reply #1 on: October 25, 2010, 08:35:53 PM »
I haven't gotten very far with my Juniper SRX implementation. I've managed to get a SRX210 (at my home) connected to an SRX650 using static routing.

I don't know what "Group VPN" is, I'll need to look that one up. We're just using the CLI and Web interface to manage the SRX routers/appliances.

I can post my "starting guide" on how I configured a Routed based VPN tunnel (as opposed to a Policy based VPN tunnel). I haven't done much yet but I don't have any spare 1010/1050s left to deploy so I'll need to start deploying the SRX210 pretty soon and then I'll need to start coming up with some configuration templates and best practices in terms of configuration and management. We will have two SRX650s connected to different ISPs so we plan to use OSPF routing (as we are with our Nortel VPN routers) to provide dynamic routing between our VPN branch offices and both our Internet links.

We've been helping network engineers, system administrators and technology professionals since June 2009.
If you've found this site useful or helpful, please help me spread the word. Link to us in your blog or homepage - Thanks!