1）配置系统https自生成证书

set system service web-management https system-generated-certificate    

2）放行接口流量（ike，https）

set security zones security-zone Outside int ge-0/0/0.0 host-inbound-traffic system-service ike

set security zones security-zone Outside int ge-0/0/0.0 host-inbound-traffic system-service https

3）配置×××地址池（access address-assignment)

set access address-assignment pool DYN-×××-ADDRESS-POOL family inet network 123.1.1.0/24

set access address-assignment pool DYN-×××-ADDRESS-POOL family inet range DYN-×××-ADDRESS-RANGE low 123.1.1.100

set access address-assignment pool DYN-×××-ADDRESS-POOL family inet range DYN-×××-ADDRESS-RANGE high 123.1.1.200

set access address-assignment pool DYN-×××-ADDRESS-POOL family inet xauth-attributes primary-dns 8.8.8.8/32

4）配置认证的profile（access profile）

set access profile DYN-×××-ACCESS-PROFILE client ***user1 firewall-user password "$9$KnH8LN4oGiqfX7Gi"

set access profile DYN-×××-ACCESS-PROFILE address-assignment pool DYN-×××-ADDRESS-POOL

5）配置认证

set access firewall-authentication web-authentication default-profile DYN-×××-ACCESS-PROFILE

6）配置IKE