Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Juniper Network Connect block access to LAN

Posted on 2011-03-01
8
Medium Priority
?
3,155 Views
Last Modified: 2012-08-14
I´m using Juniper Network Connect, and connection to VPN is good, but it adds automaticaly routes to manage all trafic through Network Connect Adapter. It affects the connection to my LAN, so, when i use the VPN i´m not able to connect with other computers or server in my LAN.

I read about changing metric on Network COnnect Adapter, but i´m not able to see it on Network Connections Windows. SO is WIndows XP SP3

Thanks in advance.
0
Comment
Question by:fresnillo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 6

Expert Comment

by:alienXeno
ID: 35014465
You can configure split tunneling  under NC options for the user roles on the Juniper SA to solve this problem.


0
 

Author Comment

by:fresnillo
ID: 35014639
Sorry, i didn´t explain all detail.

The VPN is used to support services to my company´s client, but when i connect to do that, i lose aly other connection to internet, email and internal application.

Of course, i´m not able to modify VPN policies, that´s why i´m loking for other option.
0
 
LVL 71

Expert Comment

by:Qlemo
ID: 35015289
Usually that is is intentionally set by the remote IT folks. Only if they are not capable of changing the split tunneling setting in the SA you should think about circumventing it:

Create two less general routes for default gateway:
   route add -p 0.0.0.0 mask 128.0.0.0 «yourgatewayhere»
   route add -p 128.0.0.0 mask 128.0.0.0 «yourgatewayhere»

That should allow to Internet traffic again, if Network Connect is not intercepting the traffic via a filter driver (didn't test that - do have split tunneling only to our clients).
0
Understanding Web Applications

Without even knowing it, most of us are using web applications on a daily basis. Gmail and Yahoo email, Twitter, Facebook, and eBay are used by most of us daily—and they are web applications. We often confuse these web applications tools for websites.  So, what is the difference?

 
LVL 71

Expert Comment

by:Qlemo
ID: 35015296
The above can only help with the Internet issue. You might need to use a similar approach for your LAN.
0
 
LVL 43

Expert Comment

by:JFrederick29
ID: 35016945
Modifying the local routing table will only work if "route monitoring" is not enabled on the SA side.  If it is enabled (most likely), Network Connect will disconnect the session once you modify the routing table.  Really the only way around the "policy" would be to have a conversation with the SA admin to make an exception for you if deemed necessary.
0
 

Author Comment

by:fresnillo
ID: 35018472
Yes, i have already try changing the routes manually, but Network Connect detects that and drops the connection.

It´s strange, but i have a laptop with Windows7 Pro, using the same version of Network Connect. On that laptop i´m able to work with LAN when i use wireless connection, if I use wired connection it didn´t work. As if when it´s connected by wireless it ignores routes assigned by Network Connect.

I try tha same on WinXP, adding a wireless card. but in this case, Network Connect affects both connections.

I suppose WIn7 behavior has a bug, that in this case helps me, but i´m looking to make it works on WinXP.
0
 
LVL 71

Accepted Solution

by:
Qlemo earned 2000 total points
ID: 35018983
It is intentionally, so you should not try to work around it. The only "legal" approach is to use it in a Virtual Machine you then have to access via the integrated remote control tools (MS VPC: RDP, VMWare: VIX or Web Browser plug-in).
0
 

Author Closing Comment

by:fresnillo
ID: 35074768
I used Virtual PC to be able to do that
0

Featured Post

Looking for a new Web Host?

Lunarpages' assortment of hosting products and solutions ensure a perfect fit for anyone looking to get their vision or products to market. Our award winning customer support and 30-day money back guarantee show the pride we take in being the industry's premier MSP.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question