changing vpn endpoints

[jyokoyama]

while working on a vpn tunnel (from an srx210 to an srx240), we are migrating to a new isp on one side. simply changing the ike gateway remote address did not update the firewall to actually send ike packets to the new endpoint. i had to delete the ike gateway, ike policy, ipsec policy and ipsec vpn sections, commit and then rollback. 

fyi

[Screenie]

Uh clear security ike security-associatents might have done the trick.........

[jyokoyama]

oh yeah, forgot to mention that i cleared all relating ike and ipsec security-associations, and it still kept trying the old endpoint.

[dscott98]

The only way I've been able to get around this is to deactivate the VPN, commit the changes, and then re-activate.