Problem:
I'm using ShrewSoft VPN Client version 2.1.7 in Windows 7 to connect to
Juniper SRX 210 firewall. The connection is successfully, but vpn client
erases all the DNS-servers in my existing network connection.
DNS-servers are turned back when I disconnect vpn. Now I using a
workaround - I added my DNS-servers manually to vpn config.
I propose to change the VPN client so that it does not interfere in
setting DNS, if you uncheck "Enable DNS ".
To reproduce:
Connect from Windows 7 (use manually added DNS-servers on your network
connection) to any Juniper SRX with dial-in vpn using attached config
(or same).
VPN Client version = 2.1.7
Windows OS Version = Windows 7 32-bit with service pack 1
Gateway Make/Model = Juniper SRX 210
--
My ICQ: 6693942
My Jabber: [email protected]
n:version:2
n:network-ike-port:500
n:network-mtu-size:1436
n:network-natt-port:4500
n:network-natt-rate:60
n:network-frag-size:512
n:network-dpd-enable:0
n:client-banner-enable:0
n:network-notify-enable:0
n:client-wins-used:0
n:client-wins-auto:0
n:client-dns-used:0
n:client-dns-auto:0
n:client-splitdns-used:0
n:client-splitdns-auto:0
n:phase1-dhgroup:2
n:phase1-life-secs:86400
n:phase1-life-kbytes:0
n:vendor-chkpt-enable:0
n:phase2-life-secs:3600
n:phase2-life-kbytes:0
n:policy-nailed:0
n:policy-list-auto:0
n:client-addr-auto:1
n:phase2-keylen:256
s:client-saved-username:fwuser
s:network-host:home-arm.dyndns.org
s:client-auto-mode:pull
s:client-iface:direct
s:network-natt-mode:enable
s:network-frag-mode:disable
s:auth-method:mutual-psk-xauth
s:ident-client-type:fqdn
s:ident-server-type:address
s:ident-client-data:home1.mynas200.com
b:auth-mutual-psk:MTIz
s:phase1-exchange:aggressive
s:phase1-cipher:3des
s:phase1-hash:sha1
s:phase2-transform:esp-3des
s:phase2-hmac:md5
s:ipcomp-transform:disabled
n:phase2-pfsgroup:2
s:policy-level:auto
s:policy-list-include:192.168.65.0 / 255.255.255.0
_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help
