Dynamic VPN on SRX is a pain in the ass. doesnt do half of what you would expect it to do. Go a SA instead.
Its built on IPSec (unlike the MAG which is ssl vpn) Pulse from a mobile will work, Pulse on a Mac wont. Heres the official list: *Junos Pulse* - Vista (32-bit and 64-bit) - Windows XP (32-bit and 64-bit) - Windows 7 (32-bit and 64-bit) - Windows 8.0 (32-bit and 64-bit) - Windows 8.1 (32-bit and 64-bit) *Junos Access Manager* - Windows XP 32-bit and 64-bit with any service pack - Windows Vista 32-bit and 64-bit with any service pack - Windows 7 32-bit and 64-bit with any service pack (Junos 10.4 and above only) I dont think you can route from a client though the ipsec session (if thats what you mean). Once you are in the VPN public IP's dont mean much and return routes are hard to install for a dynamic session. I would suggest a true IPSec (device to device) vpn for that. Tim Dykes M: 041 962 0603 E: ttdykes at gmail.com On Wed, Apr 30, 2014 at 12:50 PM, Ali Sumsam <[email protected]>wrote: > Hi all, > > I have a SRX240 cluster and doing VPN to it using Junos pulse client. > > My first question is, can we use a mac or windows client to connect this > VPN rather than the Junos Pulse? > > One of the options, Junose pulse shows is the "SRX". What is the protocol > behind VPN Type "SRX"? > > My second question is about the routing through the VPN session. Is it > possible to run the internet through the VPN. Has someone ever done that? > > My rough idea is, If I send default route to the VPN client > and > on the client's PC, set a route in which pointing SRX's public IP towards > the main internet connection of the PC. > This way SRX public IP will be reachable from the client's PC and default > route will be pointing towards the VPN. > > Please comment. > > Thanks, > > *Ali Sumsam - *eintellego Networks Pty Ltd > Senior Network Engineer > [email protected] ; www.eintellegonetworks.com > > Phone: 1300 239 038; Cell +61 (0)450 609 592 ; skype://sumsam.ali80 > > facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> > linkedin.com/in/alisumsam > > > The Experts Who The Experts Call > Juniper - Cisco - Cloud > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
