Dear friends,
I solved my problem, it was really irritating. I did various debugs, including ike, vpn, icmp. I realize that my pings from dynvpnclient doesn't even arrive there.
Problem is my computer. In windows, I see that route 10.0.0.0/16 (my protected-resource) is on my VPN adapter, ON-LINK and has the lowest metric, which means my packets should use that interface
But somehow, it selects my default route (0.0.0.0/0) . I install Pulse client to another device and no problem occured.
By the way, why pulse client asks for passwords again and again ? It does not save password. Maybe I'm trying to hide passwords from my employees 🙂 Are there any other client program capable to do that ?
@lyndidon
I'm very sure that too many people experienced this problem. They should add a sentence about dynamic VPN with SRX behind NAT. It cannot be that rare. I found the related topic after MarcTB gave me the missing configuration.
@MarcTB
Thank you for everything 🙂 You helped me well.