[j-nsp] Traffic drops on IPSEC - SRX3600

Ivan Ivanov ivanov.ivan at gmail.com
Mon Aug 2 10:23:06 EDT 2010


Hello,

We also experienced almost the same problem.

If you do not need some of the new features from 10.1 try with 10.0R3.10.

Do you try to send traffic (PING) from the SRX via the tunnel of from PC
attached to SRX? Because in the first case there are time outs from time to
time. But with traffic flowing trough the device no problems. We experience
that with ISG and also with Cisco on the other end.

HTH

Ivan

On Mon, Aug 2, 2010 at 4:45 PM, Fahad Khan <fahad.khan at gmail.com> wrote:

> You mean although you were using recommended Junos but u had the same issue
> and you upgraded to latest junos?
>
> Can you tell me which Junos version are u using currently??
>
> awaiting for urgent response.
>
> regards,
> Muhammad Fahad Khan
> JNCIP - M/T # 834
> IT Specialist
> Global Technology Services, IBM
> fahad at pk.ibm.com
> +92-301-8247638
> Skype: fahad-ibm
> http://pk.linkedin.com/in/muhammadfahadkhan
>
>
> On Mon, Aug 2, 2010 at 6:26 PM, Amos Rosenboim <amos at oasis-tech.net>
> wrote:
>
> > We had a the exact same thing on the lower end SRX (240 if I remember
> > correctly).
> > This was resolved by a software upgrade to the latest SRX image at the
> > time.
> >
> > Amos
> >
> > On Aug 2, 2010, at 2:48 PM, Fahad Khan wrote:
> >
> > > Hi folks,
> > >
> > > I am seeing very strange issue on SRX3600 when the traffic is flown
> > through
> > > an IPSEC VPN tunnel (established with ISG2000), the tunnel gets up and
> > the
> > > traffic flows properly, but suddenly traffic drops, while the tunnel
> > remains
> > > up.
> > >
> > > And it continues to flow after 15 to 20 time out but again it starts
> > > droping. I am sure that there is no issue at physical layer.
> > >
> > > Has any body faced it yet??
> > >
> > > Please reply ASAP.
> > >
> > > Thanks in adv
> > >
> > > regards
> > > Muhammad Fahad Khan
> > > JNCIP - M/T # 834
> > > IT Specialist
> > > Global Technology Services, IBM
> > > fahad at pk.ibm.com
> > > +92-301-8247638
> > > Skype: fahad-ibm
> > > http://pk.linkedin.com/in/muhammadfahadkhan
> > > _______________________________________________
> > > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > > https://puck.nether.net/mailman/listinfo/juniper-nsp
> >
> >
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>



-- 
Best Regards!

Ivan Ivanov


More information about the juniper-nsp mailing list