Steps

Step 1.Configure the interface IP addresses.

You can leave the IP addresses of tunnel interfaces empty. These IP addresses must be configured only if they serve as business IP addresses or an OSPF/BGP connection needs to be established with the peer end.

Step 2.Configure a default route to connect to the Internet.

Step 3.Configure a security policy to allow business traffic from zones associated with the Internet-facing interface, internal-facing interface, and tunnel interface.

To facilitate testing, traffic from all zones is allowed. In actual scenarios, allow traffic based on your business needs.

Step 4.Configure a gateway.

The following figure shows the advanced settings.

In the advanced settings, the local ID is configured. Make sure that the local ID on the Athena NGFW firewall is set to FQDN. Juniper supports only the following two ID types: ADDR and FQDN.

Step 5.Configure an IKE gateway.

The following figure shows the advanced settings.

The following two figures show how to configure the proxy ID. We recommend that you use the default settings.

Step 6.Configure a route to route traffic to the tunnel interface.