Srx ipsec vpn between srx210 devices is up but not able to ping remote IP, and each srx devices have configured site-site vpn to ssg5 here traffice going down after some time
SRX "A" ---->Srx "b" == vpn up traffic not passing (googled for solution, suggested to check policy preference levels but #insert option to move is not working & from gui it is disabled )
SRX " A" -----> SSG5 is up and able to reach remote machine but not stable ( 192.168.50.x to 192.168.2.x vpn flactuating )
plz find attached files
here tunnle is up but no traffice , routing is ok
root@oc-corp-srx> show security ike security-associations
Index Remote Address State Initiator cookie Responder cookie Mode
487 16.16.14.254 UP 7cebd24dcaa2956f 7822d3ea919f7057 Main
495 56.16.159.95 UP 1a84af70d59fe007 b2ba53735f91f17c Main
root@oc-corp-srx> show security ipsec security-associations
Total active tunnels: 2
ID Gateway Port Algorithm SPI Life:sec/kb Mon vsys
<131074 16.16.14.254 500 ESP:3des/sha1 5f12db89 3126/ unlim - root
>131074 16.16.14.254 500 ESP:3des/sha1 4256a675 3126/ unlim - root
<131073 56.16.159.95 500 ESP:3des/sha1 d22312b6 1105/ unlim - root
>131073 56.16.159.95 500 ESP:3des/sha1 11dbd72c 1105/ unlim - root