@spuluka wrote: The port needed for ESP with a dynamic ip address is UDP 4500. UDP 500 is the port used for two static addressed tunnels. you can see the details of the DMZ setup and port rules in KB10162 http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB10162 @Yes you are right @spuluka! Thanks for correcting me! ... View more

Hi, No idea if it will run. I have nog 10.11 osx running. You can download it from the juniper support site below you will find the direct url. (you need an account to have access to the pulse client) https://webdownload.juniper.net/swdl/dl/secure/site/1/record/58736.html ... View more

Hi, You need to open port 500 udp ... View more

Hi, which version are you running ? the latest at this moment is 5.1R3.2 ... View more

You are welcome :-) Glad I could help ... View more

Hi, What I know is that you can assign VLAN based on a MAC address or a MAC address OUI (first 3 octets), or mask. I'm not 100% sure that true (never had the chance to test it) normaly you would do something like this set protocols dot1x authenticator static [00:04:0f:fd:ac:fe 00:04:ae:cd:23:5f] You can try it by doing something like this set protocols dot1x authenticator static 00:04:0f Some more documentation here: https://www.juniper.net/techpubs/en_US/junos12.2/topics/example/authentication-static-mac-bypass-ex-series.html ... View more

I have not "done" this kind of setup. I have looked it up a bit.... But hard to find anything about this kind of setup. I would suggest making a lab setup an trying it out!. Or someone else on the forum must have made a setup as you are looking for. The last thing is asking the question via your juniper SE ... View more

The the client you are using is not supported. For OSX you can download the latest version of the Microsoft Remote Desktop from the app store. Version 8.0.15 is the latest. I have no windows 10 here so I'm unable to test it for you. For linux you have to have a look ... View more

Have you opened up the rdp ports in the windows firewall ? or disabled the complete firewall on windows for testing an rdp connection? ... View more

If you want to seperate "admin' users from "normal" users you could prox the realm they are in to a backend radius server, you can do this by proxying that specific realm from the "normal" users radius server to a backend server. I have seen a freeradius plugin some years ago that can check users against a tacacs server. So you should be able to use tacacs as the backend of the freeradius server and can maintain one database. Never tried it myself!! ... View more