This article provides information on how to create a Secure Tunnel (st0) interface on an SRX Series device.

Secure tunnel (st0) interfaces are used in the creation of route-based VPNs.

To configure a secure tunnel (st0) interface, perform the procedure below (an st0.0 interface will be created).

Via the CLI

set interfaces st0 unit 0 family inet address 10.11.11.10/24

Via J-Web

  Go to Configuration >Device setting 

  Click Interfaces > Ports .

  Select  Filter by " Interface type"  "st0" and Click "Go"

  Select  st0 and click  + and select "  logical interface"   .

  Fill in details like Unit , IP address , Zones  and click OK

  Commit the change .

The interface is now ready to be bound to an IPsec VPN.

2020-06-30: Updated J-Web screen shots.

• KB10100 [SRX/J] Resolution Guide - How to Troubleshoot a VPN Tunnel that won't come up. [juniper.net]
• KB10093 How to Troubleshoot a VPN that is up, but, is not Passing Traffic . [juniper.net]
• TN108:Configuration Examples: Route-Based site-to-site VPN