A route based IPSEC VPN is created between two SRX devices.

The tunnel is up but SNMP traps are not working.

IPSEC VPN is up but SNMP trap are not going to the server through this VPN

Network setup:

LAN_1 network -- SRX_A ---- ISP ---- SRX_B -- LAN_2 network

On SRX_A, we did see active session under "show security flow session source-prefix <ip> destination-prefix <ip>". We did see packet counter for the outbound traffic.

On SRX_B, we could not see active session formed for this traffic.

The IPSEC VPN tunnel is up and active.

On the SRX_B we checked for match policy using the command " show security match-policy" and noticed the traffic was hitting a security policy with then action deny.

This policy was dropping the SNMP traffic.

Changed the configuration to permit the snmp traffic through the firewall and further trap were seen on the wireshark on the destination host.