Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

I am not able to access my protected resources via Dyn VPN from public remote site.

$
0
0

Hi There,

 

I am having issue with my dynamic vpn using pulse secure. i am able to connected and getting IP, but not able to ping the resoureces. The starnge is that i cannot even ping my SRX LAN IP as well.

below is my configuration.

 

nali@JEDDAH-JEDDAH-MDIA200# show security dynamic-vpn
access-profile SERVER;
clients {
    all {
        remote-protected-resources {
            10.2.72.0/28;
        }
        remote-exceptions {
            0.0.0.0/0;
        }
        ipsec-vpn DYN_VPN;
        user {
            client1;
        }
    }
}

[edit]
nali@JEDDAH-JEDDAH-MDIA200# show security ike
policy SERVER_IKE {
    mode aggressive;
    proposal-set standard;
    pre-shared-key ascii-text "$9$n-3d9t0EhrMWxz3hyleXxjHqfF/tp0BEc0Odb"; ## SECRET-DATA
}
gateway SERVER_GW {
    ike-policy SERVER_IKE;
    dynamic {
        hostname DYNVPN;
        connections-limit 10;
        ike-user-type group-ike-id;
    }
    external-interface ge-0/0/0.0;
    xauth access-profile SERVER;
}

[edit]
nali@JEDDAH-JEDDAH-MDIA200# show security ipsec
vpn-monitor-options {
    interval 10;
    threshold 10;
}
policy IPSEC_DYN_POLICY {
    proposal-set standard;
}
vpn DYN_VPN {
    ike {
        gateway SERVER_GW;
        ipsec-policy IPSEC_DYN_POLICY;
    }
}

[edit]
nali@JEDDAH-JEDDAH-MDIA200# show access address-assignment    
pool SERVER_POOL {
    family inet {
        network 10.10.10.0/24;
        xauth-attributes {
            primary-dns 4.4.4.2/32;
        }
    }
}

[edit]
nali@JEDDAH-JEDDAH-MDIA200#

 

 

C:\Users\MRS-5>ipconfig

Windows IP Configuration


Ethernet adapter Local Area Connection* 15:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::c03f:be5d:4968:bd12%17
   IPv4 Address. . . . . . . . . . . : 10.10.10.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :

 

 

hope someone can help me with many thanks in advance


Viewing all articles
Browse latest Browse all 3959

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>