Just wanted to double check that the interface is assigned to a zone at least.
Did you try to enable the traceoptions under security ike to get more information? Best way is, that you are the responder in ike negotiation. Make sure that the other side initiates the ike traffic There is a document regarding vpn troubleshoooting: Search for: JSeries_SRXSeries_Route-based_VPN_to_ScreenOS_v13.pdf edit security ike traceoptions set file size 1m set flag policy-manager set flag ike set flag routing-socket commit Regards, Klaus On Thu, Jun 20, 2013 at 6:58 PM, bizza <[email protected]> wrote: > Actually is assigned to WAN zone. Should I put it in LAN (where policies > and other stuffs are)? > > Regards > bizza > > > On Thu, Jun 20, 2013 at 6:54 PM, Klaus Groeger <[email protected]> wrote: > >> Did you assign the st0.x interface to a zone? >> >> >> > > > -- > bizza > http://www.rm-rf.eu/ > -- nil extimescere _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
