[j-nsp] Juniper IPSEC VPN

[Joe C]

Nick,

I have set up IPsec tunnels between Juniper SRX 240 (started with 9.6, current one is a 10.x) and Cisco ISR and, the devil hides in the small details. Off the top of my head, I remember the lifetime defaults on both cisco and Juniper don't get along and I found the SRX setting a lifetime of 0 seconds, endlessly dropping and re-establishing the SA.

Although it's not the same hardware scenario, it might help.

JC

On 3 May 2010, at 22:26, Nick Ryce wrote:

> After some further testing it looks like the juniper keeps re-establishing the tunnel every 10-20 seconds or so.
> 
> Does anyone have real world experience of getting a j2320 ipsec tunnel working with an ASA5510?
> 
> Nick