Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7)...
Transcript of Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7)...
![Page 1: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/1.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 1 / 64
IKEv1 AGGRESSIVE Pre-shared key
You can use the NCP Secure Enterprise Management Server as a RADIUS server to authenticate users.
IKEv1 AGGRESSIVE Mode and Pre-shared key
This configuration example uses the NCP Secure Enterprise Management Server as a RADIUS server to
authenticate users
CLI Quick Configuration
set security policies default-policy permit-all
set interfaces st0 unit 0 family inet address 172.16.10.200/24
set security zones security-zone internet interfaces st0.0 host-inbound-traffic system-services all
set security zones security-zone internet interfaces st0.0 host-inbound-traffic protocols all
set security ike proposal IKE_PROP authentication-method pre-shared-keys
set security ike proposal IKE_PROP dh-group group19
set security ike proposal IKE_PROP authentication-algorithm sha-256
set security ike proposal IKE_PROP encryption-algorithm aes-256-cbc
set security ike proposal IKE_PROP lifetime-seconds 10000
set security ike policy IKE_POL mode aggressive
set security ike policy IKE_POL proposals IKE_PROP
set security ike policy IKE_POL pre-shared-key ascii-text "12345678"
set security ike gateway RAVPN_GW ike-policy IKE_POL
set security ike gateway RAVPN_GW dynamic hostname ncp.juniper.net
set security ike gateway RAVPN_GW dynamic user-at-hostname [email protected]
set security ike gateway RAVPN_GW dynamic connections-limit 100
set security ike gateway RAVPN_GW dynamic ike-user-type shared-ike-id
set security ike gateway RAVPN_GW external-interface ge-0/0/0
set security ike gateway RAVPN_GW aaa access-profile radius
set security ike gateway RAVPN_GW version v1-only
set security ipsec proposal IPSEC_PROP protocol esp
set security ipsec proposal IPSEC_PROP encryption-algorithm aes-256-gcm
![Page 2: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/2.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 2 / 64
set security ipsec proposal IPSEC_PROP lifetime-seconds 3600
set security ipsec policy IPSEC_POL perfect-forward-secrecy keys group19
set security ipsec policy IPSEC_POL proposals IPSEC_PROP
set security ipsec vpn RAVPN_VPN bind-interface st0.0
set security ipsec vpn RAVPN_VPN ike gateway RAVPN_GW
set security ipsec vpn RAVPN_VPN ike ipsec-policy IPSEC_POL
set security ipsec vpn RAVPN_VPN traffic-selector TS1 local-ip 0.0.0.0/0
set security ipsec vpn RAVPN_VPN traffic-selector TS1 remote-ip 0.0.0.0/0
set access profile radius authentication-order radius
set access profile radius radius-server 10.20.46.235 port 1812
set access profile radius address-assignment pool NCP_POOL
set access profile radius radius-server 10.20.46.235 secret "12345678"
set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-dns 172.16.10.10/32
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-wins 172.16.10.20/32
set security ike gateway RAVPN_GW tcp-encap-profile NCP
set security tcp-encap profile NCP
commit
Step-by-step Procedure
1) Define tunnel interface and policies
set security policies default-policy permit-all
set interfaces st0 unit 0 family inet address 172.16.10.200/24
set security zones security-zone internet interfaces st0.0 host-inbound-traffic system-services all
set security zones security-zone internet interfaces st0.0 host-inbound-traffic protocols all
2) Create IKE proposals (policies)
set security ike proposal IKE_PROP authentication-method pre-shared-keys
set security ike proposal IKE_PROP dh-group group19
set security ike proposal IKE_PROP authentication-algorithm sha-256
set security ike proposal IKE_PROP encryption-algorithm aes-256-cbc
set security ike proposal IKE_PROP lifetime-seconds 10000
![Page 3: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/3.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 3 / 64
set security ike policy IKE_POL mode aggressive
set security ike policy IKE_POL proposals IKE_PROP
set security ike policy IKE_POL pre-shared-key ascii-text “12345678"
3) Create IKE gateway
set security ike gateway RAVPN_GW ike-policy IKE_POL
set security ike gateway RAVPN_GW dynamic hostname ncp.juniper.net
set security ike gateway RAVPN_GW dynamic connections-limit 100
set security ike gateway RAVPN_GW dynamic ike-user-type shared-ike-id
set security ike gateway RAVPN_GW dynamic user-at-hostname [email protected]
set security ike gateway RAVPN_GW external-interface ge-0/0/0
set security ike gateway RAVPN_GW aaa access-profile radius
set security ike gateway RAVPN_GW version v1-only
4) Create IPsec proposals (policies)
set security ipsec proposal IPSEC_PROP protocol esp
set security ipsec proposal IPSEC_PROP encryption-algorithm aes-256-gcm
set security ipsec proposal IPSEC_PROP lifetime-seconds 3600
set security ipsec policy IPSEC_POL perfect-forward-secrecy keys group19
set security ipsec policy IPSEC_POL proposals IPSEC_PROP
5) Define VPN interface and routing information
set security ipsec vpn RAVPN_VPN bind-interface st0.0
set security ipsec vpn RAVPN_VPN ike gateway RAVPN_GW
set security ipsec vpn RAVPN_VPN ike ipsec-policy IPSEC_POL
set security ipsec vpn RAVPN_VPN traffic-selector TS1 local-ip 0.0.0.0/0
set security ipsec vpn RAVPN_VPN traffic-selector TS1 remote-ip 0.0.0.0/0
6) Create access profile for RADIUS server
set access profile radius authentication-order radius
set access profile radius radius-server 10.20.46.234 port 1812
set access profile radius address-assignment pool NCP_POOL
set access profile radius radius-server 10.20.46.234 secret "12345678"
![Page 4: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/4.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 4 / 64
7) Create IP address pool for Remote Access Users
set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-dns 172.16.10.10/32
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-wins 172.16.10.20/32
8) Enable NCP Path Finder Technology (TCP encapsulation)
set security ike gateway RAVPN_GW tcp-encap-profile NCP
set security tcp-encap profile NCP
8) Commit changes
commit
![Page 5: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/5.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 5 / 64
Configure NCP Exclusive Remote Access Client for Windows Create new Connection Profile (Configuration – Profiles)
Click on “Add” to create a new Connection Profile
![Page 6: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/6.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 6 / 64
![Page 7: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/7.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 7 / 64
![Page 8: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/8.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 8 / 64
![Page 9: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/9.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 9 / 64
![Page 10: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/10.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 10 / 64
![Page 11: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/11.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 11 / 64
![Page 12: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/12.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 12 / 64
![Page 13: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/13.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 13 / 64
Edit the Profile
![Page 14: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/14.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 14 / 64
Change the protocol and enter the pre-shared key
![Page 15: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/15.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 15 / 64
Establish the VPN connection
![Page 16: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/16.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 16 / 64
![Page 17: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/17.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 17 / 64
Configure NCP Exclusive Remote Access Client for macOS Create new Connection Profile (NCP Exclusive Remote Access Client – Profiles…)
![Page 18: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/18.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 18 / 64
Click on “+” to create a new Connection Profile
![Page 19: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/19.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 19 / 64
![Page 20: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/20.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 20 / 64
![Page 21: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/21.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 21 / 64
![Page 22: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/22.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 22 / 64
![Page 23: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/23.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 23 / 64
![Page 24: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/24.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 24 / 64
Edit the Profile
![Page 25: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/25.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 25 / 64
Change the protocol and enter the pre-shared key
![Page 26: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/26.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 26 / 64
Establish the VPN connection
![Page 27: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/27.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 27 / 64
![Page 28: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/28.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 28 / 64
Configure NCP Exclusive Remote Access Client for Android Create new Connection Profile (Menue – Configure – Profile configuration – Add Profile)
![Page 29: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/29.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 29 / 64
![Page 30: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/30.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 30 / 64
![Page 31: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/31.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 31 / 64
![Page 32: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/32.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 32 / 64
![Page 33: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/33.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 33 / 64
Enter name for connection profile
![Page 34: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/34.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 34 / 64
Enter name or IP address of Juniper SRX
![Page 35: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/35.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 35 / 64
Enable Extended Authenctication (XAUTH) and enter username and password
![Page 36: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/36.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 36 / 64
![Page 37: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/37.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 37 / 64
![Page 38: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/38.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 38 / 64
Enter the pre-shared key
![Page 39: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/39.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 39 / 64
Enter IKE-ID
![Page 40: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/40.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 40 / 64
Choose the Exchange mode (Aggressive Mode (IKEv1))
![Page 41: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/41.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 41 / 64
Save the profile by clicking on “Save” or the back button on the device
The configuration can also be imported via the app
![Page 42: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/42.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 42 / 64
Copy the configuration ncpphone.cfg or ncpphone.cnf into the folder Device storage/NCP/Import
Open the menu and choose “Import/Export”
![Page 43: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/43.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 43 / 64
Enable ncpphone.cfg and press the back/return button on your device
The configuration will be imported
![Page 44: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/44.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 44 / 64
Click on the slide button to establish a connection
![Page 45: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/45.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 45 / 64
If the establish the connection the first time, Android will ask you to allow the VPN client to establish a
connection. Click on “OK”
![Page 46: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/46.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 46 / 64
VPN connection is established
![Page 47: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/47.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 47 / 64
Configure NCP Exclusive Remote Access Client for iOS The configuration of the iOS client is done on the NCP Secure Enterprise Management Server.
After you create a configuration on the NCP Secure Enterprise Management Server, you are able to export
the configuration file ncpphone.ncpconfigsem. The file ending needs to be .ncpconfigsem
There are 2 ways to import the profile
1) Import by sending it over email or downloading it from a webserver
This sample will show the import if the file is sent via email
Send the .ncpconfigsem file via email to your iOS device
Open the email with the attachment
![Page 48: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/48.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 48 / 64
Click on the .ncpconfigsem file and choose “Copy to NCP Client”
![Page 49: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/49.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 49 / 64
![Page 50: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/50.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 50 / 64
Click “Import” to start the import process
![Page 51: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/51.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 51 / 64
Allow to add a new VPN configuration by clicking on “Allow”
![Page 52: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/52.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 52 / 64
Enter you iPhone/iPad passcode to import the configuration
![Page 53: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/53.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 53 / 64
The import of the configuration was successful
![Page 54: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/54.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 54 / 64
2) Import over iTunes
Connect the iOS devise with your computer
Open iTunes on your computer
Click on the device button
Go to File Sharing and click on NCP Client
Add the configuration via “Add File…” and click “Sync” to synchronize the information with the iOS device
![Page 55: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/55.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 55 / 64
![Page 56: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/56.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 56 / 64
Open the App on the iOS device
![Page 57: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/57.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 57 / 64
Go to “Diagnostics” and “Configuration Import”
![Page 58: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/58.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 58 / 64
Click on the .ncpconfigsem file to start the import process
![Page 59: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/59.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 59 / 64
Click on “Import”
![Page 60: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/60.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 60 / 64
Click “Allow” to add another VPN configuration
![Page 61: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/61.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 61 / 64
Enter your iPhone/iPad passcode to import the configuration
![Page 62: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/62.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 62 / 64
The import of the configuration was successful
![Page 63: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/63.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 63 / 64
Click the slide button to establish the VPN connection
![Page 64: Configuration Guide · 2017-10-23 · NCP Remote Access VPN Client for Juniper SRX Page 4 / 64 7) Create IP address pool for Remote Access Users set access address-assignment pool](https://reader030.fdocuments.us/reader030/viewer/2022040523/5e884513ea44ec05b6610d6d/html5/thumbnails/64.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 64 / 64