Policy-Based Ipsec Vpn With Juniper Junos; Appendix G- Vpn Configuration Examples; Orbit - GE MDS ORBIT MCR Technical Manual

12.0 APPENDIX G- VPN Configuration Examples

The commands listed in this section can be copy-n-pasted in the Orbit CLI (in configuration mode)
followed by "commit" to save the changes. Please turn off CLI autowizard before pasting in the
commands as shown below:
admin@(none) 18:26:51> config
admin@(none) 18:26:53% run set autowizard false
admin@(none) 18:27:03%

12.1 Policy-Based IPsec VPN with Juniper JUNOS

In this example we describe a sample configuration for a site-to-site policy based IPsec VPN setup
between Orbit MCR (2E1S) and Juniper SRX240 JUNOS appliance with IKEv2 pre-shared key based
authentication.
Customer
Cellular
Network/
network
Internet
JUNOS SRX

Orbit

IPsec Tunnel
Local LAN
Remote LAN
carrying traffic
192.168.1.0/24
between local 192.168.2.0/24
and remote
LANs
The WAN IP address of SRX240 is 172.18.175.40 and Orbit cell ip address is 172.18.175.138.
12.1.1 Orbit
12.1.1.1 Configuration
# Bridge/LAN interface configuration
set interfaces interface Bridge type bridge
set interfaces interface Bridge ipv4 address 192.168.1.1 prefix-length 24
set interfaces interface Bridge filter input IN_TRUSTED
set interfaces interface Bridge filter output OUT_TRUSTED
set interfaces interface Bridge bridge-settings members port ETH1
set interfaces interface Bridge bridge-settings members port ETH2
# Cell interface configuration
set interfaces interface Cell type cellular
set interfaces interface Cell enabled true
set interfaces interface Cell ipv4 dhcp point-to-point-connection true
MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 421