I've configured dynamic VPN on a SRX210. Junos Pulse can connect and ike/ipsec is up, so the VPN is working fine.
My problem is with routing in this scenario.
The network is very basic:
[VPN Client] --- [SRX210] --- [Internal router]
A computer with the Junos Pulse VPN client installed gets assigned IP adresses from 10.35.10.0/24. The client can ping the internal interface (10.10.10.2) on the SRX210, but not the internal router 10.10.10.1 on the internal side.
If I add a static route for 10.35.10.0/24 on the internal router, pointing towards the SRX210, routing works. VPN clients can ping 10.10.10.1. But I don't want to do that.
What I want is to export the 10.35.10.0/24 route into OSPF, which is running on the interfaces connecting the SRX210 and the internal router. Problem is that I can't figure out how to do it in this scenario.
I could keep the static route on the internal router, and write a routing policy on the internal router that exports the 10.35.10.0/24 route into OSPF. But I'd rather not do that. I'd like to do this on the SRX210 instead.
I've tried a few different ways to do this on the SRX210, but it all boils down to that the 10.35.10.0/24 isn't a real connected network, I think.