FYI: Pulse supports Dynamic VPN on the MacOS Client as of release 5.0.3. Regards,
Phil On May 1, 2014, at 12:38 AM, Tim Dykes <[email protected]> wrote: > Dynamic VPN on SRX is a pain in the ass. doesnt do half of what you would > expect it to do. Go a SA instead. > > Its built on IPSec (unlike the MAG which is ssl vpn) > > Pulse from a mobile will work, Pulse on a Mac wont. Heres the official list: > > *Junos Pulse* > > - Vista (32-bit and 64-bit) > - Windows XP (32-bit and 64-bit) > - Windows 7 (32-bit and 64-bit) > - Windows 8.0 (32-bit and 64-bit) > - Windows 8.1 (32-bit and 64-bit) > > *Junos Access Manager* > > - Windows XP 32-bit and 64-bit with any service pack > - Windows Vista 32-bit and 64-bit with any service pack > - Windows 7 32-bit and 64-bit with any service pack (Junos 10.4 and > above only) > > > > > I dont think you can route from a client though the ipsec session (if thats > what you mean). Once you are in the VPN public IP's dont mean much and > return routes are hard to install for a dynamic session. I would suggest a > true IPSec (device to device) vpn for that. > > Tim Dykes > > M: 041 962 0603 > E: ttdykes at gmail.com > > > On Wed, Apr 30, 2014 at 12:50 PM, Ali Sumsam > <[email protected]>wrote: > >> Hi all, >> >> I have a SRX240 cluster and doing VPN to it using Junos pulse client. >> >> My first question is, can we use a mac or windows client to connect this >> VPN rather than the Junos Pulse? >> >> One of the options, Junose pulse shows is the "SRX". What is the protocol >> behind VPN Type "SRX"? >> >> My second question is about the routing through the VPN session. Is it >> possible to run the internet through the VPN. Has someone ever done that? >> >> My rough idea is, If I send default route to the VPN client >> and >> on the client's PC, set a route in which pointing SRX's public IP towards >> the main internet connection of the PC. >> This way SRX public IP will be reachable from the client's PC and default >> route will be pointing towards the VPN. >> >> Please comment. >> >> Thanks, >> >> *Ali Sumsam - *eintellego Networks Pty Ltd >> Senior Network Engineer >> [email protected] ; www.eintellegonetworks.com >> >> Phone: 1300 239 038; Cell +61 (0)450 609 592 ; skype://sumsam.ali80 >> >> facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> >> linkedin.com/in/alisumsam >> >> >> The Experts Who The Experts Call >> Juniper - Cisco - Cloud >> _______________________________________________ >> juniper-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
