Now it works similarly to firewall filters where policies are executed from top to bottom priority parameter is removed. Fill in the Connection name, Server name or address parameters. Whether this policy is invalid - the possible cause is a duplicate policy with the same src-address and dst-address. State of phase 1 negotiation with the peer. That is why he said that sometimes it is not established.
nest...