I've connected Juniper SRX5800 and another enodeB device (don't know the vendor) by an IPSec tunnel. It uses IKEv1 for negotiation of keys. there are 10 ACLs on the enodeB side and on Juniper SRX, I have configured ip-to-any ACLs for all 10 enodeB IP addresses.
When in this setup, I observe that only 5 SA get created. Juniper although successfully negotiates the last three SAs, sends a delete notification again and again. So, the the last three SA get deleted. I want to know whether anyone in this community knows of a limitation in the Juniper SRX5800 series which makes it behave like this. The version of the OS with me is 11.4R2.14