[j-nsp] IPSEC VPN

Mohammad Khalil eng.mssk at gmail.com
Fri Jan 24 19:05:38 EST 2014


Hi all
I have configured an IPSEC VPN between two SRX firewalls and it was working
well
Something occurred and the tunnel went down
I have checked the interface terse output and found that the st0 interface
was up/down
I removed the configuration for the st0 interface and configured it again
and it came up again
anyway the tunnel is still down even though the configuration was not
modified
Every SRX has other tunnels up and running
The strange issue is that the show security ike security-associations shows
the state as DOWN , and there are multiple entries from one of te srx boxes
to the same destination with different index showing DOWN
I removed phase 1 configuration and got it back again but still the same
issue

any ideas?

BR,
Mohammad


More information about the juniper-nsp mailing list