Re: Strange IPsec behaviour between SRXs

Here are some more strange details:

I can ping the devices in the 77-th subnet from SRX-01.

I can NOT ping the devices in the 3-th subnet from the SRX-02.

I can ping the SRX-01 from the devices in the 77-th subnet.

I can NOT ping the SRX-02 from the devices in the 3-th subnet.

I can NOT ping the devices in the 3-th subnet from the devices in the 77-th subnet.

I can NOT ping the devices in the 77-th subnet  from the devices in the 3-th subnet.

The only difference in configuration is the port in the SRX-01.

Here is the config:

Den@SRX-01# show
vlan-tagging;
unit 2 {
    description ISP-Contoso;
    vlan-id 2;
    family inet {
        address 10.10.10.10/24;
    }
}
unit 3 {
    description ISP-Adatum;
    vlan-id 3;
    family inet {
        address 11.11.11.11/24;
    }
}
unit 5 {
    description INTERNAL;
    vlan-id 5;
    family inet {
        address 192.168.3.24/24;
    }
}

Thanks,

Den.