Re: SRX220 trouble with IPsec VPN

Hello,

From the attached configruation it seems that you are using route based VPN tunnel on SRX. But in the above configuration I see that you have not binded the st0.0 interface with the VPN tunnel and it could be the reason that there is no IPSEC traffic between the peers.

Please use the command set security ipsec vpn pri-hq-pri bind-interface st0.0  to bind the st interface with the VPN tunnel.

Please refer the following document for more help with route based VPN tunnels.

http://www.juniper.net/techpubs/en_US/junos12.1x44/topics/example/ipsec-route-based-vpn-configuring.html 

Thanks,

Pulkit Bhandari

Please mark my response as Solution Accepted if it Helps, Kudos are Appreciated too.