Set security ipsec proposal dyn-prop-ph2 protocol esp SET Command output of IPSEC show security ipsec | display set Set security ike gateway gw-dyn-1 xauth access-profile dyn-vpn-prof1 Set security ike gateway gw-dyn-1 external-interface vlan.11 Set security ike gateway gw-dyn-1 dynamic connections-limit 2 Set security ike gateway gw-dyn-1 dynamic hostname Set security ike gateway gw-dyn-1 ike-policy ike-dyn-pol1 Set security ike policy ike-dyn-pol1 pre-shared-key ascii-text '$9$QQpG3/t1RSM87uO87-V4oz369uOIEclvW' Set security ike policy ike-dyn-pol1 proposals ike-dyn-prop1

Set security ike policy ike-dyn-pol1 mode aggressive Set security ike proposal ike-dyn-prop1 encryption-algorithm 3des-cbc Set security ike proposal ike-dyn-prop1 authentication-algorithm md5 Set security ike proposal ike-dyn-prop1 dh-group group2 Set security ike proposal ike-dyn-prop1 authentication-method pre-shared-keys SET command output of show security ike | display set Pre-shared-key ascii-text '$9$QQpG3/t1RSM87uO87-V4oz369uOIEclvW' # SECRET-DATA Set system services web-management https interface vlan.11 Set system services web-management https system-generated-certificate SET command output of https show system services web-management | display set Set access firewall-authentication web-authentication default-profile dyn-vpn-prof1Ģ) Enable https on show system services web-management Set access address-assignment pool pool1 family inet xauth-attributes primary-dns 8.8.8.8/32 Set access address-assignment pool pool1 family inet range range1 high 192.168.200.40 Set access address-assignment pool pool1 family inet range range1 low 192.168.200.20 Set access address-assignment pool pool1 family inet network 192.168.200.0/24 Set access profile dyn-vpn-prof1 address-assignment pool pool1 Set access profile dyn-vpn-prof1 client john firewall-user password '$9$5znCO1hKMXtuMX7-2gTz36tuBIEyev' SET command output of access show access | display set

Password '$9$5znCO1hKMXtuMX7-2gTz36tuBIEyev' # SECRET-DATA Here is the config: 1) First configure profile config which contains users and ip assignments for the show access I have tested it and it works:) However I could only use windows clients in my setup although I tried so hard to get a working linux client, debugging didn’t provide me any useful information. Here is my simple dynamic vpn configuration.

Juniper srx dynamic vpn