Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: LAB SRX 540 To MX-140 IPSEC Tunnel

$
0
0

This is phase 1 proposal mismatch

One think I noticed you using on SRX

set security ike gateway ike-gw local-identity inet 10.0.1.2
set security ike gateway ike-gw remote-identity inet 10.0.1.1

 

 Remove it at all or  reconfigure to

set security ike gateway ike-gw local-identity inet 2.2.2.2
set security ike gateway ike-gw remote-identity inet 1.1.1.1.1

 

You do not need to specify the local IKE identity to send in the exchange with the destination peer to establish communication. If you do not configure a local-identity, the device uses the IPv4 or IPv6 address corresponding to the local endpoint by default.

 

Regards

Leon Smirnov

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>