Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Replacing a SSG5 with SRX100H2 in branch office

$
0
0

Looking closer at the two configurations,  I think you have PFS enabled on the SRX but not on the SSG.  Please try removing PFS from this policy.

 

policy ipsec_pol_Colo_VPN {
            perfect-forward-secrecy {
                keys group2;
            }
            proposals Colo_IPSEC_P2;
        }

Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>