I have A IPsec vpn that is running between 2 SRX’s, One SRX is connected to A 4G router and behind CG-NAT.
The link is to provide a backup management access.
The VPN is up but SSH connection access the VPN are really poor and constantly disconnecting
I have deduced with testing the issues is this
The NAT device in the service provider is timing out the UDP sessions really quickly, I have tested by setting up a OSPF adjacency across this tunnel and enabling BFD, I believe this BFD packets constant transmitting from the each end keep the session alive on this carrier firewall. This problem is this chews thought my bandwidth costing me.
Is it possible to establish a VPN over TCP in some way between 2 SRX’s