Verifying and Updating Configuration of Extranets for VPNs
From the SRC CLI, you can correct errors in extranet configuration when these errors result from directory or portal errors. In the extranet configuration, an extranet client of an object must be imported by that object.
In the SRC configuration for a subscriber that is the client of an extranet client, you specify a VPN for the imported extranet client. Typically, you add the extranet client and specify the imported extranet from the Enterprise Manager Portal. You can use the SRC CLI to verify the configuration and to make updates to the existing configuration.
To view information about extranet configuration and update it:
- From configuration mode, access the configuration statement that represents the configuration for the VPN.
[edit]user@host#edit subscribers retailer name vpn
vpn-id
[edit]user@host#edit subscribers retailer
name
subscriber-folder
folder-name
enterprise
name
vpn
vpn-id
where
vpn-id
is the name of the routing instances on a JUNOS routing platform that implements the VPN.
- View the configuration for the VPN. For example:
[edit subscribers retailer Acme vpn 1234]user@host#show
extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users,o=umc" "enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];- (Optional) Change or add the distinguished name (DN) of a retailer or an enterprise that is an extranet client of this VPN.
[edit subscribers retailer name vpnvpn-id
]user@host#set extranet-client
extranet-client
[edit subscribers retailer name vpnvpn-id
]user@host#set extranet-client
enterpriseName=Acme2,ou=local,retailername=default, o=Users, o=umc
- (Optional) Change or add extranets to be imported by specifying the DN of the extranet.
[edit subscribers retailer name vpnvpn-id
]user@host#set imported-extranets
imported-extranets
You can specify one or more extranets.
- Verify that the updated configuration is correct.
[edit subscribers retailer name vpnvpn-id
]user@host#show
[edit subscribers retailer Acme vpn 1234]user@host#show
extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users,o=umc" "enterpriseName=Acme2, ou=local, retailername=default, o=Users,o=umc""enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];