SRX

I have built a vpn and  put a static route with next hop st0.0.

whne you do a show route the st0.0 route does not show up.

    st0 {
        unit 0;
    }
}
routing-options {
    static {
        route 172.18.2.0/30 next-hop 172.18.1.1;
        route 172.31.15.1/32 next-hop 172.18.1.1;
        route 172.20.102.0/24 next-hop st0.0;
    }
}
security {
    ike {
        policy phase1-policy {
            mode main;
            proposal-set standard;
            pre-shared-key ascii-text "$9$lvtMxdDjqz395Q"; ## SECRET-DATA
        }
        gateway srx-gateway {
            ike-policy phase1-policy;
            address 172.18.2.2;        
            dead-peer-detection {      
                interval 20;           
                threshold 5;           
            }                          
            external-interface fe-0/0/3;
        }                              
    }                                  
    ipsec {                            
        policy phase2-policy {         
            proposal-set standard;     
        }
        vpn srx {
            bind-interface st0.0;
            ike {
                gateway srx-gateway;
                ipsec-policy phase2-policy;
            }
            establish-tunnels immediately;

        }

 [edit]
root@srxA-1# run show route

inet.0: 8 destinations, 10 routes (8 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

10.0.1.0/24        *[Direct/0] 2d 03:31:20
                    > via fe-0/0/0.0
10.0.1.201/32      *[Local/0] 2d 03:31:22
                      Local via fe-0/0/0.0
172.18.1.0/30      *[Direct/0] 00:28:06
                    > via fe-0/0/3.0
172.18.1.2/32      *[Local/0] 2d 03:31:22
                      Local via fe-0/0/3.0
172.18.2.0/30      *[Static/5] 00:28:05
                    > to 172.18.1.1 via fe-0/0/3.0
172.20.101.1/32    *[Local/0] 2d 03:31:21
                      Reject
172.31.15.1/32     *[Direct/0] 00:23:02
                    > via fe-0/0/7.0
                    [Local/0] 00:23:02
                      Local via fe-0/0/7.0
                    [Static/5] 00:28:05
                    > to 172.18.1.1 via fe-0/0/3.0
192.168.1.1/32     *[Direct/0] 2d 03:31:56
                    > via lo0.0

Hi,

If you're looking to use an unumbered tunnel interface, I would add "family inet".

set interfaces st0 unit 0 family inet

I hope this helps.

John

Just on an offchance - did you bind the st0 interface into a security zone?

Thank you very much that helped.

The set interface st0.0 family inet.