SRX Services Gateway
Showing results for 
Search instead for 
Do you mean 
Reply
Highlighted
Contributor
Posts: 133
Registered: ‎03-11-2017
0 Kudos
Accepted Solution

traffic selector

i have read that a single phase 1 can establish multiple phase 2 SAs or VPNs .....

 

 

1-is this related to traffic selector or there is other senarios ???

 

 

2- when using traffic selector , does it create a separate SA for each subnet ??

Distinguished Expert
Posts: 5,028
Registered: ‎03-30-2009

Re: traffic selector

Multiple SA are created in three scenarios:

 

Policy based VPN when you have more than one subnet on at least one side of the VPN

 

route based VPN when you configure traffic selectors

 

route based VPN when you configure proxy-id

 

Each set of subnets one local and one remote create an SA 

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV
JNCDA JNCDS-DC JNCDS-SEC
JNCIS-SP
ACE PanOS 6 ACE PanOS 7
http://puluka.com/home