You have more than one phase 2, destined to different locations, binded to tunnel3 right?
Can you paste the config? I will give you the solution
Cheers,
I like the way you talk! Yep, three phase two's, on tunnel.3 . Here's the parts of the config that I think are relevant:
set vpn "trust-lincs_home" gateway "lincs_home-gw" no-replay tunnel idletime 0 sec-level standard
set vpn "trust-lincs_home" id 79 bind interface tunnel.3
set vpn "dmz-lincs_home" gateway "lincs_home-gw" no-replay tunnel idletime 0 sec-level standard
set vpn "dmz-lincs_home" id 76 bind interface tunnel.3
set vpn "oobmgmnt-lincs_home" gateway "lincs_home-gw" no-replay tunnel idletime 0 sec-level standard
set vpn "oobmgmnt-lincs_home" id 81 bind interface tunnel.3
set vpn "trust-lincs_home" proxy-id local-ip 172.16.105.0/24 remote-ip 172.16.2.0/24 "ANY"
set vpn "dmz-lincs_home" proxy-id local-ip 172.16.106.0/24 remote-ip 172.16.2.0/24 "ANY"
set vpn "oobmgmnt-lincs_home" proxy-id local-ip 172.16.107.0/24 remote-ip 172.16.2.0/24 "ANY"
set ike gateway "lincs_home-gw" address 60.x.x.x Main outgoing-interface "redundant3" preshare "xxxxxxx" sec-level standard
set interface tunnel.3 ip unnumbered interface redundant3
set zone id 101 "linc-zone"
set interface "tunnel.3" zone "linc-zone"
set policy id 99 from "Trust" to "linc-zone" "Any" "Any" "ANY" permit log
set policy id 75 from "linc-zone" to "Trust" "172.16.2.0/24" "172.16.105.0-LAN" "ANY" permit log
Let me know if you need anything else. Thanks heaps!