MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 421
12.0 APPENDIX G- VPN Configuration Examples
The commands listed in this section can be copy-n-pasted in the Orbit CLI (in configuration mode)
followed by “commit” to save the changes. Please turn off CLI autowizard before pasting in the
commands as shown below:
admin@(none) 18:26:51> config
admin@(none) 18:26:53% run set autowizard false
admin@(none) 18:27:03%
12.1 Policy-Based IPsec VPN with Juniper JUNOS
In this example we describe a sample configuration for a site-to-site policy based IPsec VPN setup
between Orbit MCR (2E1S) and Juniper SRX240 JUNOS appliance with IKEv2 pre-shared key based
authentication.
Orbit
JUNOS SRX
Local LAN
192.168.1.0/24
Remote LAN
192.168.2.0/24
Customer
Network/
Internet
Cellular
network
IPsec Tunnel
carrying traffic
between local
and remote
LANs
The WAN IP address of SRX240 is 172.18.175.40 and Orbit cell ip address is 172.18.175.138.
Orbit 12.1.1
12.1.1.1 Configuration
# Bridge/LAN interface configuration
set interfaces interface Bridge type bridge
set interfaces interface Bridge ipv4 address 192.168.1.1 prefix-length 24
set interfaces interface Bridge filter input IN_TRUSTED
set interfaces interface Bridge filter output OUT_TRUSTED
set interfaces interface Bridge bridge-settings members port ETH1
set interfaces interface Bridge bridge-settings members port ETH2
# Cell interface configuration
set interfaces interface Cell type cellular
set interfaces interface Cell enabled true
set interfaces interface Cell ipv4 dhcp point-to-point-connection true