SRX Services Gateway
Highlighted
SRX Services Gateway

SRX210 site-to-Site VPN suddenly stopped working one-way

‎01-05-2016 07:53 AM

I Have two Juniper SRX 210's configured for a Site-toSite VPN. This morning SRX (B) on our remote site went awry and had to be force shutdown (10 second hold of power button). The device came back ok however the Site-to-site VPN, which has been in place for two years now only appears to be routing traffice one way Eg SRX (A) can ping and see anything behind SRX (B) however SRX (B) cannot ping anything on or behind SRX (A)

 

Staff at Remote office cannot use the VPN.

 

Could anything have currupted in the force shutdown? If so how could I check?

 

Bit of an amatuer so be gentle! Smiley Embarassed

 

Cheers

3 REPLIES 3
Highlighted
SRX Services Gateway

Re: SRX210 site-to-Site VPN suddenly stopped working one-way

[ Edited ]
‎01-05-2016 08:19 AM

Hi,

 

Could you please explain " went away "  and " behind "

Check for the harware and log messages.

 

 Please explain the issue clearly with logs.

 

Highlighted
SRX Services Gateway

Re: SRX210 site-to-Site VPN suddenly stopped working one-way

‎01-05-2016 08:26 AM

Awry = Frozen, Hanging, not responding. In other words it needed a reboot!

Behind - the LAN side of the Firewall.

 

What logs do you want? There's a page full of them from the Files Menu.

Highlighted
SRX Services Gateway

Re: SRX210 site-to-Site VPN suddenly stopped working one-way

‎01-05-2016 11:03 PM

Hello ,

 

If the device freezed , we can try to do an RCA using the existing logs in the devices . What could have tried is that , we could have tried to access the consol and if that also was not accessable , then we can check for HW issues . If we chad consol access , we could have troubleshooted for Root cause .

 

So to summarize , opening a JTAC ticket and providing them with availible logs may give the Root cause . I cannot confirm 100% since its possible that some logs get rollback when the device reboots . But we can give a try .


Thanks,
Sam

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too .....
Feedback