Re: Phase2 failure message with there was preexisting session from the same peer

Hello,

Spokes are behind the NAT device with dyanmic IP. The first two tunnels (one spoke ssg5 and the other srx100) come up phase1,2 but  third tunnel with third spokes srx100 fail the phase2 with this issue durning rekey process. Can I use the following command for clearing vpn sessions as your comments?

clear security ike security-associations

clear security ipsec security-associations

Thanks

Lay Min