Balance 580 to Juniper SRX


#1

We have one Balance 580 and build the VPN tunnel with Remote site , the configure as below


The VPN tunnel work fine but we always see the blog as below.


Have any idea about the log ? I don’t know why the log always happen.

Thanks


#2

Hi,

Can you PM me the serial number of Balance 580? Please help to enable Remote Assistance as well.

Thank you.


#3

Hi,

Below is your IPSec settings. 3 x IPSec tunnels are using same WAN on Balance 580 and Juniper side.

Balance 580---------------------------------Juniper
10.150.50.0/24 <-----IPSec tunnel1-----> 10.10.0.0/16
10.20.0.0/16 <--------IPSec tunnel2-----> 10.10.0.0/16
10.20.0.0/16 <--------IPSec tunnel3-----> 10.100.0.0/16

Any reason you want to configure in such way? Fyi, this is not the recommended way. We recommend having an IPSec tunnel only between Balance 580 and Juniper


#4

yes, original just 10.20.0.0/16 <----IPSec tunnel1 --> 10.10.0.0/16 and 10.100.0.0/16 but always have the log so I try to separate to 2 different tunnel.


#5

Hi,

Please ensure 1 IPSec tunnel only between Balance 580 and Juniper as below. Then we will follow up from there if problem persists.

Balance 580----------------------------------------------Juniper
10.150.50.0/24, 10.20.0.0/16 <-----IPSec tunnel-----> 10.10.0.0/16, 10.100.0.0/16