Is there any reason a /31 address would not work on a SRX tunnel interface (i.e. st0.1)

Shouldn't be; I've done /31s and /127s on GRE and st interfaces without issues on various SRXs.


The VPN is up, ping is allowed and both sides show outbound traffic but neither sides shows any inbound traffic.

Are the st interfaces in a security zone? Are you pinging _to_ the remote SRX or _through_ it? If the former, do you have host-inbound-traffic configured to permit it? If the latter, do you have security policies configured to permit the traffic?

--
Hugo Slabbert       | email, xmpp/jabber: h...@slabnet.com
pgp key: B178313E   | also on Signal

Attachment: signature.asc
Description: Digital signature

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to