SRX5308 VPN -> DMZ rules

[tedspence]

Hi there,

I'd like to create a rule that allows a VPN user (connected through site-to-site VPN) to communicate with certain devices on the DMZ. However, I can't see where this would be done. There are rules defined for DMZ <-> LAN and DMZ <-> WAN, but I can't figure out how rules for a VPN -> DMZ are defined.

Is there a place to do this?

[jmizoguchi]

you need to create second vpn tunnel for fore LAN subnet are used in the DMZ
also you need to use LAN-DMZ to allow the traffic

[andromeda]

i have the same problem.
when you say create second another vpn tunnel:

i have to create another ike policies and vpn policies on the srx5308 and
another tunnel on client vpn pro ? or only, i have to create another vpn tunnel
on clien vpn pro ?

Thanls for your response.

Regards.