Hi all I have resolved the issue by configuring the second IP address of the tunnel to a different unit
BR, Mohammad ---------- Forwarded message ---------- From: Mohammad Khalil <eng.m...@gmail.com> Date: Tue, Oct 29, 2013 at 5:28 PM Subject: SRX IPSEC Full Mesh To: "juniper-nsp@puck.nether.net" <juniper-nsp@puck.nether.net> Hi all I have three SRX firewall , one of them is acting as a hub and the other two are spokes I have established two IPSEC VPNs between each spoke and the hub and all is functioning well Now , I had a requirement to establish a direct IPSEC VPN between the spokes , when I do so , I lose all VPN connections on one of the spokes and the tunnel never comes up ? I suspected that there is something wrong in the traffic pattern due to learn the prefix from two places or something , what should be done to avoid this and bring the two tunnels toward the hub and the spoke up and functioning ? BR, Mohammad _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp