9608G VPN back to a single Juniper SRX300 Firewall, FQDN

[dsm600rr]

So my clients firewall guy is spinning his/our wheels trying to get their 9608G's to VPN Back to his Juniper SRX300 Firewall.

I have done this tons of times with Cisco ASA's, never Juniper

I sent him the settings we typically use with the ASA however he wants to try a FQDN

I see the option to select a FQDN withing the VPN Menu, however I do not see anywhere to enter the actual FQDN. Anyone know where I can input this, or if it even has a chance of working?

Thank you.

ACSS

 

[dsm600rr]

Bit of an update. I found where to put the FQDN and now the tunnel builds successfully.

I am getting a "Discover 192.168.43.1" and I have an IP Route of 192.168.43.254 in which I can ping out to google.

The phone will build the tunnel, ask for the extension and password and then go to "Discover 192.168.43.1"

From what I can tell watching monitor, the phone never hits the PBX.

Thoughts?

ACSS