Hi, So, the correct way would be something like set groups top policy-options policy-statement ospf-export term 1 from protocol direct route-filter 10.16.15.0/24 prefix-length-range /24-/24 set groups top policy-options policy-statement ospf-export term 1 from protocol direct route-filter 192.16.15.0/24 ...

Hi, several notes: I suppose you'd want all interface to be protected, right? For that it's most straightforward to just apply a filter to lo0 (and remove the one on the interface to avoid confusion). That way you can also do without the "from destination-address" statement The filter RE-Protect ...

Ok, I'll have some folks dig into it this coming week. Art ------------------------------ Art StineArt Stine ------------------------------

Thank you Steve for the prompt reply and really appreciated. First issue, for the tunnel up/down, this is only happening when traffic started otherwise tunnel always are up and not fluctuating, I tested SRX 5800 with same config and it's working fine, so something SRX 5400 it's causing issue but ...

For a vpn that is going up/down follow the outline in this kb article to identify the cause. https://supportportal.juniper.net/s/article/SRX-How-to-troubleshoot-a-VPN-tunnel-that-is-going-up-and-down?language=en_US Upgrades from the EOL version 12 generally require multiple steps up to a current ...

Hi, I have srx 5400 just recently installed and setup done for ipsec, tunnel is stable if no traffic, but tunnel is going up/down when traffic started. Traffic is less than 7 GB, but link BW is 20G, so I don't think this causing issue. There is no alarm on SRX, Could you please someone suggest, ...

NOTE: I'm guessing the Mist UI Routing Policy section is doing the same. But I don't have the OSPF license so I can't tell. ------------------------------ MOHAMMAD ALI ------------------------------