SRX 345 running JUNOS 15.1X49-D130.6
New system with two route-based VPNs configured. The static routes disappear when IKE / IPSec are active. When IKE / IPSec are deactivated the static routes disappear.
Here are the route statements:
set routing-options static route 0.0.0.0/0 next-hop 99.99.99.150
set routing-options static route 90.90.90.40/32 next-hop st0.5555
Show routes:
superit@my345srx> show route 90.90.90.40
inet.0: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[Static/5] 1w3d 20:35:39
> to 99.99.99.150 via ge-0/0/7.0 < - - - WRONG
superit@my345srx> edit
Entering configuration mode
[edit]
superit@my345srx# deactivate security ipsec vpn ipsec-vpn-system
[edit]
superit@my345srx# deactivate security ike gateway ike-gw-system
[edit]
superit@my345srx# commit
commit complete
[edit]
superit@my345srx# exit
Exiting configuration mode
superit@my345srx> show route 90.90.90.40
inet.0: 25 destinations, 25 routes (25 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
90.90.90.40/32 *[Static/5] 00:02:15
> via st0.5555 < - - - CORRECT WHILE IKE AND IPSEC VPN DEACTIVATED.
superit@my345srx> edit
Entering configuration mode
[edit]
superit@my345srx# activate security ike gateway ike-gw-system
[edit]
superit@my345srx# activate security ipsec vpn ipsec-vpn-system
[edit]
superit@my345srx# commit
commit complete
[edit]
superit@my345srx# exit
Exiting configuration mode
superit@my345srx> show route 90.90.90.40 < - - - THIS COMMAND WAS RUN WITHIN A FEW SECONDS of EXITING CONFIG MODE.
inet.0: 25 destinations, 25 routes (25 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
90.90.90.40/32 *[Static/5] 00:03:43
> via st0.5555 < - - - CORRECT
superit@my345srx>
superit@my345srx> show route 90.90.90.40< - - - THIS COMMAND WAS RUN ABOUT 20 to 30 SECONDS AFTER LAST COMMNAD. THE ROUTE CHANGED!
inet.0: 24 destinations, 24 routes (24 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[Static/5] 1w3d 20:53:29
> to 99.99.99.150 via ge-0/0/7.0< - - - WRONG