Description

Whenever the client commits a configuration including IKE (can be anything related to it) the IKE works and secure client is stable, however, after reboot on the SRX, IKE does not work afterwards.

After a reboot, Client VPN doesn't work until we make a change to the IKE gateway. It doesn't seem to make a difference what is changed, even just changing the connection limit makes it start working again.

It seems like the commit itself is activating some process that doesn't start automatically.

Symptoms

  • No core dumps have been generated.
  • Secure Connect VPN client does not work after the device reboots.
  • Any commit regarding the IKE configuration makes the VPN client work again.
  • PPPoE is the external interface

Solution

We found out this issue has matched a new PR:
https://prsearch.juniper.net/problemreport/PR1766594
 

Issue is fixed on Junos versions: 23.2R2, 23.4R2.

 

Workaround:

Configure the gateway ip address under IKE, it is only possible if ppoe handshake is giving a static IP address if not then no workaround is possible

or

Triggering an event pushing a commit when a user connects to VPN.

Modification History

2024-01-16 : Article Created