Hi There,
I am having issue with my dynamic vpn using pulse secure. i am able to connected and getting IP, but not able to ping the resoureces. The starnge is that i cannot even ping my SRX LAN IP as well.
below is my configuration.
nali@JEDDAH-JEDDAH-MDIA200# show security dynamic-vpn
access-profile SERVER;
clients {
all {
remote-protected-resources {
10.2.72.0/28;
}
remote-exceptions {
0.0.0.0/0;
}
ipsec-vpn DYN_VPN;
user {
client1;
}
}
}
[edit]
nali@JEDDAH-JEDDAH-MDIA200# show security ike
policy SERVER_IKE {
mode aggressive;
proposal-set standard;
pre-shared-key ascii-text "$9$n-3d9t0EhrMWxz3hyleXxjHqfF/tp0BEc0Odb"; ## SECRET-DATA
}
gateway SERVER_GW {
ike-policy SERVER_IKE;
dynamic {
hostname DYNVPN;
connections-limit 10;
ike-user-type group-ike-id;
}
external-interface ge-0/0/0.0;
xauth access-profile SERVER;
}
[edit]
nali@JEDDAH-JEDDAH-MDIA200# show security ipsec
vpn-monitor-options {
interval 10;
threshold 10;
}
policy IPSEC_DYN_POLICY {
proposal-set standard;
}
vpn DYN_VPN {
ike {
gateway SERVER_GW;
ipsec-policy IPSEC_DYN_POLICY;
}
}
[edit]
nali@JEDDAH-JEDDAH-MDIA200# show access address-assignment
pool SERVER_POOL {
family inet {
network 10.10.10.0/24;
xauth-attributes {
primary-dns 4.4.4.2/32;
}
}
}
[edit]
nali@JEDDAH-JEDDAH-MDIA200#
C:\Users\MRS-5>ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection* 15:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::c03f:be5d:4968:bd12%17
IPv4 Address. . . . . . . . . . . : 10.10.10.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
hope someone can help me with many thanks in advance