thanks let me configure it and i will share the results ... View more

thanks for the info regarding the static route. regarding the active directory question. the users and the active directory is connected on the network which is reachable from the external interface of the SA. what i believe that it depends on the routing that from where does the IP of the active directory is reachable and does not depend on the internal and external interface. can you kindly confirm ... View more

thanks for the information. regarding the static routing -how many static route entries SA6500 box can support, is there any limit? [z]>>>No known limit. Our of curiosity, how many were you looking at/wanting to install? [NOC]>>>well we have four MPLS VRFs in which we want to provide access to the users. so we are thinking to create sub-interfaces on the outside interface and assign VLAN-IDs to it so that each VLAN connects the SA in four MPLS VRFs. The issue is that out of four VRFs one VRF contains 1000+ routes. the another issue is that all the destination networks in the VRFs and even users IP addresses are from 10.0.0.0/8 range. we can assing 192.X or 172.X ranges over Network Connect Junos Pluse, but for clientless access the routing would be tricky. note:we are not deploying the SA for Internet users rather we are deploying it for our internal organizational users ... View more