Re: pppoe VPN Site-to-Site VSRX problem in configuration

Hi,

Few queries to clarify the details:

# As per your first post , both ends are v.SRX2.0 , and has public ip address. So does both the end have a pp0.0 interface to communicate to the internet?

# Are you able to reach to any internet ip using pp0 interface?

# As per the config of SRX-A , i see that pp0.0 has a dynamic ip, is it true?

    pp0 {
        unit 0 {                       
            ppp-options {
                chap {
                    default-chap-secret "$9$I4XRyeLX1LX-Y4ZM8wgoaiH"; ## SECRET-DATA
                    local-name "zibuti@SRX-A";
                    passive;
                }
            }
            pppoe-options {
                underlying-interface ge-0/0/1.0;
                idle-timeout 0;
                auto-reconnect 5;
                client;
            }
            family inet {
                mtu 1492;
                negotiate-address; >>>negotaiate address
            }

# Does the other wend also have a dynamic ip, if yes the vpn tunnel is not possible as one of the end has to havea static ip.

# If one of the end has a static ip , what is the status of the ike sa.

# How many packets do you see exchanged between the two devices during the ike negotiation?

regards

hemant