![Page 1: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/1.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 1 / 71
IKEv2 EAP-TLS
IKEv2 with user authentication requires the use of certificates. You can use the NCP demo certificates to
establish a VPN connection.
IKEv2 requires EAP for user authentication. SRX cannot act as EAP server. For IKEv2 EAP an external RADIUS
server MUST do the EAP authentication. SRX will act as a pass-through authenticator relaying EAP messages
between the VPN client and RADIUS server.
You can use the NCP Secure Enterprise Management Server as a RADIUS server to authenticate users.
EAP requires a PKI. You can use the NCP demo certificates (public/private key pair) to test the connection.
Configure SRX for IKEv2 EAP-TLS and PKI (Certificates) CLI Quick Configuration
set security policies default-policy permit-all
set interfaces st0 unit 0 family inet address 172.16.10.200/24
set security zones security-zone internet interfaces st0.0 host-inbound-traffic system-services all
set security zones security-zone internet interfaces st0.0 host-inbound-traffic protocols all
set security pki ca-profile NCP_CA ca-identity ncp.juniper.net
set security pki ca-profile NCP_CA revocation-check disable
set security ike proposal IKE_PROP authentication-method rsa-signatures
set security ike proposal IKE_PROP dh-group group19
set security ike proposal IKE_PROP encryption-algorithm aes-256-gcm
set security ike proposal IKE_PROP lifetime-seconds 10000
set security ike policy IKE_POL proposals IKE_PROP
set security ike policy IKE_POL certificate local-certificate NCP_CA
set security ike gateway RAVPN_GW ike-policy IKE_POL
set security ike gateway RAVPN_GW dynamic hostname ncp.juniper.net
set security ike gateway RAVPN_GW dynamic user-at-hostname [email protected]
set security ike gateway RAVPN_GW dynamic connections-limit 100
set security ike gateway RAVPN_GW dynamic ike-user-type group-ike-id
set security ike gateway RAVPN_GW local-identity distinguished-name
![Page 2: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/2.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 2 / 71
set security ike gateway RAVPN_GW external-interface ge-0/0/0
set security ike gateway RAVPN_GW aaa access-profile radius
set security ike gateway RAVPN_GW version v2-only
set security ipsec proposal IPSEC_PROP protocol esp
set security ipsec proposal IPSEC_PROP encryption-algorithm aes-256-gcm
set security ipsec proposal IPSEC_PROP lifetime-seconds 3600
set security ipsec policy IPSEC_POL perfect-forward-secrecy keys group19
set security ipsec policy IPSEC_POL proposals IPSEC_PROP
set security ipsec vpn RAVPN_VPN bind-interface st0.0
set security ipsec vpn RAVPN_VPN ike gateway RAVPN_GW
set security ipsec vpn RAVPN_VPN ike ipsec-policy IPSEC_POL
set security ipsec vpn RAVPN_VPN traffic-selector TS1 local-ip 0.0.0.0/0
set security ipsec vpn RAVPN_VPN traffic-selector TS1 remote-ip 0.0.0.0/0
set access profile radius authentication-order radius
set access profile radius radius-server 10.20.44.235 port 1812
set access profile radius address-assignment pool NCP_POOL
set access profile radius radius-server 10.20.44.235 secret "12345678"
set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-dns 172.16.10.10/32
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-wins 172.16.10.20/32
set security ike gateway RAVPN_GW tcp-encap-profile NCP
set security tcp-encap profile NCP
commit
request security pki local-certificate load filename ncpvpngw1.pem key ncpvpngw1.key certificate-id NCP_CA
request security pki ca-certificate load ca-profile NCP_CA filename ncpdemoca1a.crt
![Page 3: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/3.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 3 / 71
Step-by-step Procedure
1) Define tunnel interface and policies
set security policies default-policy permit-all
set interfaces st0 unit 0 family inet address 172.16.10.200/24
set security zones security-zone internet interfaces st0.0 host-inbound-traffic system-services all
set security zones security-zone internet interfaces st0.0 host-inbound-traffic protocols all
2) Create CA profile
set security pki ca-profile NCP_CA ca-identity ncp.juniper.net
set security pki ca-profile NCP_CA revocation-check disable
3) Create IKE proposals (policies)
set security ike proposal IKE_PROP authentication-method rsa-signatures
set security ike proposal IKE_PROP dh-group group19
set security ike proposal IKE_PROP encryption-algorithm aes-256-gcm
set security ike proposal IKE_PROP lifetime-seconds 10000
set security ike policy IKE_POL proposals IKE_PROP
set security ike policy IKE_POL certificate local-certificate NCP_CA
4) Create IKE gateway
set security ike gateway RAVPN_GW ike-policy IKE_POL
set security ike gateway RAVPN_GW dynamic hostname ncp.juniper.net
set security ike gateway RAVPN_GW dynamic user-at-hostname [email protected]
set security ike gateway RAVPN_GW dynamic connections-limit 100
set security ike gateway RAVPN_GW dynamic ike-user-type group-ike-id
set security ike gateway RAVPN_GW local-identity distinguished-name
set security ike gateway RAVPN_GW external-interface ge-0/0/0
set security ike gateway RAVPN_GW aaa access-profile radius
set security ike gateway RAVPN_GW version v2-only
![Page 4: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/4.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 4 / 71
5) Create IPsec proposal (policy)
set security ipsec proposal IPSEC_PROP protocol esp
set security ipsec proposal IPSEC_PROP encryption-algorithm aes-256-gcm
set security ipsec proposal IPSEC_PROP lifetime-seconds 3600
set security ipsec policy IPSEC_POL perfect-forward-secrecy keys group19
set security ipsec policy IPSEC_POL proposals IPSEC_PROP
6) Define VPN interface and routing information
set security ipsec vpn RAVPN_VPN bind-interface st0.0
set security ipsec vpn RAVPN_VPN ike gateway RAVPN_GW
set security ipsec vpn RAVPN_VPN ike ipsec-policy IPSEC_POL
set security ipsec vpn RAVPN_VPN traffic-selector TS1 local-ip 0.0.0.0/0
set security ipsec vpn RAVPN_VPN traffic-selector TS1 remote-ip 0.0.0.0/0
7) Create access profile for RADIUS server
set access profile radius authentication-order radius
set access profile radius radius-server 10.20.46.234 port 1812
set access profile radius address-assignment pool NCP_POOL
set access profile radius radius-server 10.20.46.234 secret "12345678"
8) Create IP address pool for Remote Access Users
set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-dns 172.16.10.10/32
set access address-assignment pool NCP_POOL family inet xauth-attributes primary-wins 172.16.10.20/32
9) Enable NCP Path Finder Technology (TCP encapsulation)
set security ike gateway RAVPN_GW tcp-encap-profile NCP
set security tcp-encap profile NCP
commit
10) Commit changes
commit
![Page 5: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/5.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 5 / 71
11) Import/load certificates
Use SCP to copy certificates to the SRX in /cf/root/
request security pki local-certificate load filename ncpvpngw1.pem key ncpvpngw1.key certificate-id NCP_CA
request security pki ca-certificate load ca-profile NCP_CA filename ncpdemoca1a.crt
![Page 6: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/6.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 6 / 71
Configure NCP Exclusive Remote Access Client Create new Connection Profile (Configuration – Profiles)
Click on “Add” to create a new Connection Profile
![Page 7: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/7.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 7 / 71
![Page 8: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/8.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 8 / 71
![Page 9: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/9.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 9 / 71
![Page 10: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/10.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 10 / 71
![Page 11: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/11.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 11 / 71
![Page 12: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/12.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 12 / 71
Choose user certificate (Configuration – Certificates)
![Page 13: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/13.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 13 / 71
Edit “Standard certificate configuration” profile
![Page 14: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/14.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 14 / 71
Click on “…” on PKCS#12 Filename
![Page 15: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/15.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 15 / 71
![Page 16: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/16.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 16 / 71
![Page 17: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/17.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 17 / 71
Copy the CA/issuer certificate into the folder CaCerts of the NCP program folder
![Page 18: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/18.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 18 / 71
Establish the VPN connection by clicking on “Connect”
![Page 19: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/19.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 19 / 71
(If NCP test certificate is used PIN is : 1234)
![Page 20: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/20.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 20 / 71
![Page 21: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/21.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 21 / 71
Configure NCP Exclusive Remote Access Client for macOS Create new Connection Profile (NCP Exclusive Remote Access Client – Profiles…)
![Page 22: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/22.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 22 / 71
Click on “+” to create a new Connection Profile
![Page 23: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/23.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 23 / 71
![Page 24: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/24.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 24 / 71
![Page 25: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/25.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 25 / 71
![Page 26: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/26.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 26 / 71
![Page 27: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/27.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 27 / 71
![Page 28: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/28.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 28 / 71
Choose user certificate (NCP Exclusive Remote Access Client – Preferences…)
![Page 29: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/29.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 29 / 71
![Page 30: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/30.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 30 / 71
Edit “Standard certificate configuration” profile
Click on “…” on PKCS#12 Filename
![Page 31: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/31.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 31 / 71
![Page 32: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/32.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 32 / 71
![Page 33: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/33.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 33 / 71
Copy the CA/issuer certificate into the folder CaCerts of the NCP program folder
![Page 34: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/34.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 34 / 71
Establish the VPN connection by clicking on “Connect”
![Page 35: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/35.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 35 / 71
(If NCP test certificate is used PIN is : 1234)
![Page 36: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/36.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 36 / 71
![Page 37: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/37.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 37 / 71
Configure NCP Exclusive Remote Access Client for Android Copy the CA/issuer certificate and the user certificate into the folder Device Storage/NCP/Import
![Page 38: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/38.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 38 / 71
Open the client and go to “Import/Export” in the menu
![Page 39: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/39.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 39 / 71
![Page 40: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/40.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 40 / 71
![Page 41: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/41.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 41 / 71
Enable the CA/issuer certificate and the user certificate and press the back/return button on the device
The CA/issuer certificate and the user certificate will be imported
![Page 42: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/42.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 42 / 71
Create new Connection Profile (Menue – Configure – Profile configuration– Add Profile)
![Page 43: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/43.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 43 / 71
![Page 44: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/44.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 44 / 71
![Page 45: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/45.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 45 / 71
Enter profile name.
![Page 46: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/46.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 46 / 71
Enter name or IP address of Juniper SRX
![Page 47: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/47.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 47 / 71
Enable Extended Authentication (XAUTH) and enter username and password
![Page 48: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/48.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 48 / 71
![Page 49: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/49.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 49 / 71
![Page 50: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/50.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 50 / 71
Click on “Certificate” and choose the user certificate
![Page 51: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/51.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 51 / 71
Enter IKE ID
![Page 52: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/52.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 52 / 71
Save the profile by clicking on “Save” in the menu or use the back/return button on the device
You can also import the configuration file ncpphone.cfg or ncpphone.cnf
![Page 53: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/53.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 53 / 71
Copy the CA/issuer certificate, user certificate and the ncpphone.cfg or ncpphone.cfg into the folder Device
Storage/NCP/Import
![Page 54: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/54.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 54 / 71
Open the “Import/Export” function in the menu
![Page 55: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/55.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 55 / 71
![Page 56: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/56.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 56 / 71
Enable the CA/issuer certificate and the configuration file and push the back/return button on the device
The CA/issuer certificate and the configuration will be imported
![Page 57: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/57.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 57 / 71
Establish a connection by clicking the slide button
![Page 58: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/58.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 58 / 71
Enter PIN for user certificate
![Page 59: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/59.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 59 / 71
![Page 60: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/60.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 60 / 71
Configure NCP Exclusive Remote Access Client for iOS The configuration of the iOS client is done on the NCP Secure Enterprise Management Server.
After you create a configuration on the NCP Secure Enterprise Management Server, you are able to export
the configuration file ncpphone.ncpconfigsem. The file ending needs to be a .ncpconfigsem file
Import over iTunes
Connect the iOS devise with your computer
Open iTunes on your computer
Click on the device button
Go to File Sharing and click on NCP Client
![Page 61: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/61.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 61 / 71
Add the configuration, the user certificate and the CA/issuer certificate via “Add File..” and click “Sync” to
synchronize the information with the iOS device
Open the App on the iOS device
![Page 62: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/62.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 62 / 71
Go to “Diagnostics” and “Configuration Import”
![Page 63: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/63.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 63 / 71
![Page 64: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/64.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 64 / 71
Click on the .ncpconfigsem file to start the import process
![Page 65: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/65.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 65 / 71
Click on “Import”
![Page 66: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/66.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 66 / 71
Enter the PIN of the user certificate
![Page 67: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/67.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 67 / 71
Click “Allow” to add another VPN configuration
![Page 68: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/68.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 68 / 71
Enter your iPhone/iPad passcode to import the configuration
![Page 69: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/69.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 69 / 71
The import of the configuration was successful
![Page 70: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/70.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 70 / 71
![Page 71: Configuration Guide - Remote Access VPN Lösungen (VPN … · 2017-10-23 · set access address-assignment pool NCP_POOL family inet network 172.16.10.0/24 ... Configuration Guide](https://reader031.vdocument.in/reader031/viewer/2022021811/5ca060a688c993c5178d1659/html5/thumbnails/71.jpg)
Americas: NCP engineering, Inc. 678 Georgia Ave. · Sunnyvale, CA 94085 · Phone: +1 (650) 316-6273 · www.ncp-e.com
Others: NCP engineering GmbH · Dombuehler Str. 2 · 90449 Nuremberg · Germany · Fon +49 911 9968-0 · Fax +49 911 9968-299
Configuration Guide NCP Remote Access VPN Client for Juniper SRX
Page 71 / 71
Click the slide button to establish the VPN connection