1

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is to issue command restart ipsec-key-management or reboot the device. As this is only one device and I don't have a backup for it, I'm looking for first variant - is to restart key management.

I've googled a bit and didn't find anything about what services exactly affected by this restart. Is it only IKE? Or IKE and IPSEC? Will all active IPSEC connections be disconnected at the moment?

1

Answer was found on Juniper forums and it states, quote:

This will restart the entire IPSec process.

So, answering my question - all IPSEC connections will be terminated.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.