SRX security policies: error: Failed to build dop for policy receive error: configuration check-out
Following commit error can occur on the srx:
Code:
# commit
error: Failed to build dop for policy receive
error: configuration check-out failed
This is because one of my security policies contained the same target subnet/IPs in source/destination:
Code:
from-zone untrust to-zone vr1 {
policy receive {
match {
source-address remote-net;
destination-address remote-net; <--HERE
application any;
}
then {
permit {
tunnel {
ipsec-vpn vr1-to-vr1;
pair-policy send;
}
}
}
}
}