Re: VPN and routing

Hi Aigarz!

I include "ike" in the command line, without this parameter the command gave error. Is this correct in this way?

set security ipsec vpn VPN_Finep_Site_to_Site ike proxy-identity local 192.168.4.0/23
set security ipsec vpn VPN_Finep_Site_to_Site ike proxy-identity remote 10.2.18.0/23

But the problem persists.

[edit]
root@srx340# set security ipsec vpn VPN_Finep_Site_to_Site ike proxy-identity local 192.168.4.0/23

[edit]
root@srx340# set security ipsec vpn VPN_Finep_Site_to_Site ike proxy-identity remote 10.2.18.0/23

[edit]
root@srx340# commit
commit complete

[edit]
root@srx340# exit
Exiting configuration mode

root@srx340> show security ike security-associations
Index   State  Initiator cookie  Responder cookie  Mode           Remote Address
3574094 UP     670d62c8e5d26d51  d30a1dfc6d325f94  Main           200.155.97.50

root@srx340> show security ipsec security-associations
  Total active tunnels: 0

##########################################################################################

root@srx340> show
        }
        vpn VPN_Finep_Site_to_Site {
            bind-interface st0.0;
            ike {
                gateway gw_VPN_Finep_Site_to_Site;
                proxy-identity {
                    local 192.168.4.0/23;
                    remote 10.2.18.0/23;
                    service any;
                }
                ipsec-policy ipsec_pol_VPN_Finep_Site_to_Site;
            }
            establish-tunnels immediately;
        }