Re: [j-nsp] Ipsec tunnel flapping

2018-07-02 Thread sameer mughal
anyone, check my below raise issue? On Thu, Jun 28, 2018 at 3:54 PM, sameer mughal wrote: > remote site logs are also shared below: > > Jun 28 17:23:20 rpd[1398]: EVENT st0.0 index 79 PointToPoint Multicast> > Jun 28 17:23:20 kmd[1403]: KMD_VPN_DOWN_ALARM_USER: VPN VPN-SOORTY from > 123.12

Re: [j-nsp] Ipsec tunnel flapping

2018-06-28 Thread sameer mughal
remote site logs are also shared below: Jun 28 17:23:20 rpd[1398]: EVENT st0.0 index 79 Jun 28 17:23:20 kmd[1403]: KMD_VPN_DOWN_ALARM_USER: VPN VPN-SOORTY from 123.123.123.123 is down. Local-ip: 50.50.50.50, gateway name: gw-soortybd, vpn name: VPN-SOORTY, tunnel-id: 131073, local tunnel-if:

Re: [j-nsp] Ipsec tunnel flapping

2018-06-28 Thread sameer mughal
Gentlemans, anyone help me on this issue? On Mon, Jun 25, 2018 at 10:37 PM, sameer mughal wrote: > Dear Alexandre, > Please guide how can I fix this issue? It raise suddenly before this on > same configuration ipsec tunnel was working fine for more than 5 to 6 > months. > > On Mon, Jun 25, 2018

Re: [j-nsp] Ipsec tunnel flapping

2018-06-25 Thread sameer mughal
Dear Alexandre, Please guide how can I fix this issue? It raise suddenly before this on same configuration ipsec tunnel was working fine for more than 5 to 6 months. On Mon, Jun 25, 2018, 8:22 PM Alexandre Guimaraes < alexandre.guimar...@ascenty.com> wrote: > Sameer > > > Reason: IPSec SA delete

Re: [j-nsp] Ipsec tunnel flapping

2018-06-25 Thread sameer mughal
Dear Koyle, I have already configure static route towards destination. On Mon, Jun 25, 2018, 6:50 PM Eldon Koyle wrote: > Do you have a default route over that tunnel? If so, once the tunnel > comes up it will try to route the ipsec connection through the tunnel, > which will break the tunnel.

Re: [j-nsp] Ipsec tunnel flapping

2018-06-25 Thread Alexandre Guimaraes
Sameer Reason: IPSec SA delete payload received from peer, corresponding IPSec SAs cleared This is a phase 2 problem, maybe deadpeerdetection failure, VPN monitoring failure, a failure during rekey when old SA is deleted notification sent to delete old SA. Most of the cases. att Alexandre

Re: [j-nsp] Ipsec tunnel flapping

2018-06-24 Thread sameer mughal
both sites on srx. following are the logs. show log junilog|match st0.15 Jun 25 01:47:51 rpd[1867]: EVENT st0.15 index 86 Jun 25 01:47:51 rpd[1867]: EVENT UpDown st0.15 index 86 Jun 25 01:47:51 rpd[1867]: EVENT UpDown st0.15 index 86 10.115.10.2 -> 10.115.10.2 Jun 25 01:47:51 kmd[1902

Re: [j-nsp] Ipsec tunnel flapping

2018-06-24 Thread Alexandre Guimaraes
Have you checked the errors? Do a deep Inspection and check the packets to see what’s the behavior that’s trigger the down state. Tcpdump Will give you hints. Both sides uses SRX? att Alexandre Em 24 de jun de 2018, à(s) 07:59, sameer mughal escreveu: > Hi All, > I am facing ipsec tunnel fla

[j-nsp] Ipsec tunnel flapping

2018-06-24 Thread sameer mughal
Hi All, I am facing ipsec tunnel flapping issue on srx550. Both sides isp links are up and stable but still tunnel is flapping. Can anyone facing similar problem or any solution to fix this issue? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net h