Site-to-Site IPSec VPN Cisco-Juniper

Site-to-Site IPSec VPN Cisco-Juniper

: 

 Scenario!

Here in this LAB we have seven routers. R1, R2 and R3 routers represents Branch Router. R1 is working here as the HQ router and R2 and R3 as the Branch Router. R1 and R2 routers are from Juniper Networks and R3 router is from Cisco Inc.

R4 router is working as an internet router.

Other routers (R5 to R7) are working here as an end device.

Task

1. 1.      Configure Policy-based site-to-site VPN.
2. 2.      Consider R4’s loopback address as internet route.
3. 3.      R5 and R6 are configured as server so these servers should be reached from Branch Office too.
4. 4.      Both Branch i.e. R2 and R3 should get internet from HQ i.e. R1
5. 5.      In HQ router we have three zones named SERVER, INTERNET and INTRANET. SERVER Zones belongs to R5 and R6. INTERNET Zone belongs to R4 and INTRANET Zone belongs to the interface connected to the Switch.
6. 6.      In Branch Router we only have two zones named LAN and INTRANET.
7. 7.      Configure IP address as below
8. a.      R1 to R4

                                                    i.     Network 10.0.14.0/24

1.      R1 IP : 10.0.14.1/24

2.      R4 IP : 10.0.14.4/24

b.      R1 to R5

                                                    i.     Network 192.168.1.0/24

1.      R1 IP : 192.168.1.1/24

2.      R5 IP : 192.168.1.10/24

c.      R1 to R6

                                                    i.     Network 192.168.10.0/24

1.      R1 IP : 192.168.10.1/24

2.      R6 IP : 192.168.10.10/24

d.      R1, R2, R3

                                                    i.     Network 10.0.123.0/24

1.      R1 IP : 10.0.123.1/24

2.      R2 IP : 10.0.123.2/24

3.      R3 IP : 10.0.123.3/24

e.      R2 to R7

                                                    i.     Network 192.168.2.0/24

1.      R2 IP : 192.168.2.1/24

2.      R7 IP : 192.168.2.20/24

f.       R3 Loopback (Configure as shown in the diagram)