Thank you Steve again, we are not running any vpn monitoring, The Main issue on SRX 5400 it's tunnel is not stable when traffic started, the problem is peer dead detection happening due the peer ike unreachable message from remotes site. Why this happening because of srx 5400 kind of congestion, around ...

Hi Farid, We can use the keyword exact here----> route-filter 10.16.15.0/24 exact. This would match the prefix 10.16.15.0/24. Regards ------------------------------ Sheetanshu Shekhar ------------------------------

Hi Mohammad Ali, The selected protocol should be direct in place of OSPF, in the screenshot that has been shared. The policy configured on the Mist portal will show up in the device config only when it is applied as an export/import policy in a protocol configuration. Assuming that the protocol ...

For the vpn troubleshooting the logging level would need to be increased to information level to get detailed messages as noted in the kb. Also verify that vpn monitoring is either not in use or adjusted as needed per the later steps. On the upgrade path, there are maximum jump levels that would ...

Hi, So, the correct way would be something like set groups top policy-options policy-statement ospf-export term 1 from protocol direct route-filter 10.16.15.0/24 prefix-length-range /24-/24 set groups top policy-options policy-statement ospf-export term 1 from protocol direct route-filter 192.16.15.0/24 ...

Hi, several notes: I suppose you'd want all interface to be protected, right? For that it's most straightforward to just apply a filter to lo0 (and remove the one on the interface to avoid confusion). That way you can also do without the "from destination-address" statement The filter RE-Protect ...

Ok, I'll have some folks dig into it this coming week. Art ------------------------------ Art StineArt Stine ------------------------------