VPN Issue

[Smurfy0815]

Hello, I'm a Newbie to FW + Networks; I tried to configure my SSG5 to get access via Shrew-VPN Client to our Network,

I used the documentation (Chapter 5: Dialup Virtiual Private Networks) and the client is able to establish a tunnel; 

But it only connects to the ip-Adress of our IPS and I'm not able to connect to any of the devices in our lan!

I think there is a issue with a route or something

Could anybody give me a hint

Thanks 

Bernd

[Screenie]

My guess is you configured a host address in the VPN policy not a network, but it's not more then a (wild) guess.

[WL]

Hmm, could you post relevant config, we can take a look.

[nces]

Hi,

I have the exact same proble, in the meantime i've recomended user to use netscreen remote, but i'm still trying to make it work.

So far what i have noted the following:

1. Configuration on Juniper side (with xauth) is ok (at least it works with netscreen remote without any changes).

2. When Shrew connects, it get's an IP address from the pool;

3. Althoug the vpn client states that it is connected, if you do an "get sa" on the juniper device, you find out that there is no connection...

4. No traffic logs are generated.

Any sugestions?

[WL]

can you check the "get event" that will usually tell you the state.

The log viewer in the NSR will also tell you more about the debugs as well.

[ELKIM]

Hi,

Could u share your juniper device config and remote client config ?

try to modify your policy => policy from untrust to trust with source dial up user, destination any, service any and use "nat source using engress interface"

Thanks,

Indra Elkim