Thanks alot for the clear explanation of the Proxy-identity. I have also confirmed this by the following command
" >show security ipsec security-associations detail "
Further i just want to know what's the way around to configure mutiple proxy-identities on the following firewalls
SRX1500 with 17.3R1.10
SRX320 with 15.1X49-D45
We are going to access Multiple LAN's at the Datacentre(SRX1500) with branch-end LAN (SRX320) by using Proxy-identities.
We have redundant Service providers and our vendor have told us that traffic-selectors dont work in the auto-shifting of traffic in the event of failure of either ISP Link. So we have configured IPSec VPN with proxy-identites but now our management have asked us to access another LAN from the Datacentre. So now what's the solution to cater this scenario?
We have configured Multi Proxy-identities on NetSceen devices SSG20 (after updating OS) and ISG2000. Now we want to achieve the same goal on SRX too.