Juniper SSG140 VPN 1

[chieftan]

Hi all,

Someone may know the answer to this.

I know on a physical interface multiple IPSec tunnels can use it as a gateway, so the creation of many tunnels to utilise the one interface is not an issue.

My question concerns Sub-interfaces.

Is it possible to have 2 ipsec tunnels utilise the same sub-interface on the SSG5 and SSG140?

The reason I ask is we have 2 tunnels utilisng the same sub-interface, but, when 1 tunnel is UP the other tunnel goes down and the same Vice Versa.

Any help would be greatly appreciated.

Many thanks

 

[chieftan]

Configured and working.

 

[jdekoning]

Hey Chieftan,

Having this same issue.
How did you resolve it in the end?

Thanks, J

 

[chieftan]

Hi jdekoning

Basically, the part that was missing was the proxy ID settings and the remote and local network inclusion and that was it.

It appears that if you do not utilise the Proxy ID settings then you can only have 1 vpn tunnel, but if you tick this check box and enter the remote and local networks then it all springs to life.

Hope that helps.