Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] What does the Ready State tell us in the route table?



Article ID: KB6404 KB Last Updated: 11 Feb 2021Version: 5.0

This article explains what the Ready State in the route table means.




  • Tunnel interface with VPN Monitor

  • VPN Monitor

  • Rekey Option

  • get route

  • State of a route



This solution describes the state of the tunnel interface when using VPN Monitor with/without Re-key option

Tunnel Interface without VPN Monitor and Rekey Option: Tunnel interface will always be in ready state as there is no mechanism to identify the correct state.

Tunnel Interface with only VPN Monitor Turned On: If using NSRP, during initial boot up process, the system will have the tunnel interface in ready state "R" on the primary unit, and inactive on the backup unit. The Ready state indicates that the Tunnel interface is Ready to pass traffic through, but needs something to trigger the VPN so the SA's can be up. Once the SA becomes up, tunnel interface state goes to the Up state. If a cable is physically pulled out of the interface that the tunnel interface is bound to, the tunnel interface state will change to a Down state.

Tunnel Interface with VPN Monitor and Rekey Option enabled: If re-key option is used along with VPN Monitor, this will keep the SA's up. It will not wait for actual traffic to trigger the VPN, and cause the tunnel interface to switch from R to U state.

For more related information, refer to KB6221 - What is the state of a tunnel Interface when the associated VPN tunnel went down.


Modification History:

2021-02-11: Minor non-technical edits; article re-reviewed for accuracy, article is correct and complete.


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search