[Vpn-help] Want to route 0.0.0.0 through the tunnel

[mgrooms]

On Tue, 24 Jun 2008 23:26:34 +0200, Zöller, Benjamin
<Benjamin.Zoeller at salt-solutions.de> wrote:
> Hi,
> we are searching for a client which works with linux and windows.
> The Screw Client looks very good.
> I can connect to my Netscreen 50 but I have a problem.
> I can't route 0.0.0.0/0 through the tunnel.
> 
> I have done a second try with a hostaddress that was no problem.
> But I need 0.0.0.0/0 cause at the Netscreen the policy is Dial-up -> any
> 
> What must I do to get this working?
> 

Benjamin,

I have tested the client with a configuration thats tunnels all traffic to
a Netscreen gateway. It should work fine. You would just configure the
policy on the Netscreen with a 0.0.0.0/0 network ID and select "Tunnel All"
in the policy tab of the client site configuration. Does this not work for
you? If not, does it fail to negotiate the IPsec SA ( phase2 ) or does it
negotiate fine but fail to send ESP traffic properly?

Thanks,

-Matthew