{primary:node0} leon@SRX240> show security ike security-associations node0: -------------------------------------------------------------------------- {primary:node0} leon@SRX240> show security ipsec security-associations node0: -------------------------------------------------------------------------- Total active tunnels: 0 {primary:node0} leon@SRX240> show security flow session node0: -------------------------------------------------------------------------- Session ID: 8, Policy name: self-traffic-policy/1, State: Active, Timeout: 40, Valid In: b.b.b.b/4500 --> a.a.a.a/4500;udp, If: reth1.75, Pkts: 233, Bytes: 23454 Out: a.a.a.a/4500 --> b.b.b.b/4500;udp, If: .local..0, Pkts: 59, Bytes: 18408 Session ID: 59, Policy name: N/A, State: Active, Timeout: N/A, Valid In: b.b.b.b/0 --> a.a.a.a/0;esp, If: reth1.75, Pkts: 0, Bytes: 0 Session ID: 60, Policy name: N/A, State: Active, Timeout: N/A, Valid In: b.b.b.b/0 --> a.a.a.a/0;ah, If: reth1.75, Pkts: 0, Bytes: 0 Session ID: 4708, Policy name: self-traffic-policy/1, State: Active, Timeout: 4, Valid In: a.a.a.a/500 --> b.b.b.b/500;udp, If: .local..0, Pkts: 1, Bytes: 438 Out: b.b.b.b/500 --> a.a.a.a/500;udp, If: reth1.75, Pkts: 1, Bytes: 474 Total sessions: 9 node1: -------------------------------------------------------------------------- Session ID: 1, Policy name: N/A, State: Backup, Timeout: N/A, Valid In: b.b.b.b/0 --> a.a.a.a/0;esp, If: reth1.75, Pkts: 0, Bytes: 0 Session ID: 2, Policy name: N/A, State: Backup, Timeout: N/A, Valid In: b.b.b.b/0 --> a.a.a.a/0;ah, If: reth1.75, Pkts: 0, Bytes: 0 Total sessions: 2 {primary:node0} leon@SRX240> show configuration security ike { proposal ike-proposal-HOME { authentication-method pre-shared-keys; dh-group group5; authentication-algorithm sha-384; encryption-algorithm aes-256-cbc; lifetime-seconds 28800; } policy ike-policy-HOME { mode main; proposals ike-proposal-HOME; pre-shared-key ascii-text "xxxxxxxxxx"; ## SECRET-DATA } gateway ike-gate-HOME { ike-policy ike-policy-HOME; address b.b.b.b; external-interface reth1.75; version v2-only; } } ipsec { proposal ipsec-proposal-HOME { protocol esp; authentication-algorithm hmac-sha-256-128; encryption-algorithm aes-256-cbc; lifetime-seconds 3600; } policy ipsec-policy-HOME { perfect-forward-secrecy { keys group5; } proposals ipsec-proposal-HOME; } vpn ipsec-vpn-HOME { bind-interface st0.1; ike { gateway ike-gate-HOME; ipsec-policy ipsec-policy-HOME; } establish-tunnels immediately; } } {primary:node0} leon@SRX240> show configuration interfaces unit 1 { family inet { address 10.10.12.1/30; } }