Hi All, I've just spent a few hours over the weekend playing with 12.1X46-D40 and I believe I may have found a bug in the VPN Monitoring feature.
From what I can see 12.1X46-D40 is pulling down VPNs with VPN Monitor enabled even when the links between the sites are fine. I have tested 1) SRX100 12.1X46-D40 <-> SRX240 12.1X44-D35 2) SRX220 12.1X46-D40 <-> 3x SRX110 12.1X44-D30 Now I haven't tested X46 <-> X46 VPNs so it may just be a compatibility issue between the two but X46-D35 did not have this issue. So to fix on 1) I disabled VPN Monitoring and on 2) I downgraded the SRX220 to 12.1X46-D35. All the VPN links are stable again. This command: show security ipsec security-associations detail Was showing that the reason for "Tunnel Down" was VPN Monitoring. Sometimes the VPN would stay up for a couple of hours other times it was dropping every 5-10 minutes, so it was a bit hard to troubleshoot at first! Anyway I just thought I'd let you all know :) Michael.
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
