Juniper UAC Appliance IC4500 Step by Step Configuration (Part 1)

If not sure what is Juniper UAC Products, Here is the URL for review
http://www.juniper.net/us/en/products-services/security/uac/ic4500/

Actually there is similar Juniper Secure Access / SSL vpn product introduced before here.
Just recently configured an IC4500 to implementation access control. Here is some steps to share out. Hopefully it can save some others time for their task.

Juniper UAC Appliance IC4500 Step by Step Configuration (Part 1)
Juniper UAC Appliance IC4500 Step by Step Configuration (Part 2) – Certificates based Authentication
Pulse Secure (formerly Juniper Pulse) – UAC Configuration Summary

1. Log into system

2. Upgrade Package

Upgrade it to latest version 4.2.R1 build 19091. It can be done from Maintenance->System-> Upgrade/Downgrade:

3. Set up Internal Port network info while others can keep default settings.

4. Licensing

5. Add a new Infranet Enforcer

Infranet+Enforcer+Connection.png?resize=400%2C217&ssl=1

6. Configure SRX to interact with IC4500

[email protected]> show configuration services
unified-access-control {
infranet-controller ic4500 {
address 10.9.0.6;
interface reth0.2;
password “$9$f5F/CA0hSeO1eWx7sn/9A1R”; ## SECRET-DATA
}
inactive: test-only-mode;
}

Note: Updated on Oct 25 2012, Interface reth5.200 can not be in any routing instance except the main one. By the way, you also can use fxp interface to do connection with UAC device (Updated Feb 24 2016)

{primary:node1}

[email protected]> show services unified-access-control status

node1:

————————————————————————–

Host Address Port Interface State

ic4500 10.9.0.6 11123 fxp0.0 connected

7. Create new Users Realms