Hello everyone.
I'm configuring a new SRX345 cluster running 15.1X49-D50.3.
I'm trying to use an lt-0/0/0 interface so that I can bring up OSPF between my master routing instance and my MPLS routing instance. However, the lt-0/0/0 interface does not even show up when I do show interfaces terse. Any ideas as to what is going on here? Relevant config and show output is below.
{primary:node0}[edit] root@NU-MDF-SRX345# run show interfaces terse Interface Admin Link Proto Local Remote ge-0/0/0 up down gr-0/0/0 up up ip-0/0/0 up up ge-0/0/1 up up ge-0/0/2 up up ge-0/0/2.0 up up aenet --> fab0.0 ge-0/0/3 up down ge-0/0/3.1000 up down aenet --> reth1.1000 ge-0/0/3.1001 up down aenet --> reth1.1001 ge-0/0/3.32767 up down aenet --> reth1.32767 ge-0/0/4 up down ge-0/0/4.1000 up down aenet --> reth1.1000 ge-0/0/4.1001 up down aenet --> reth1.1001 ge-0/0/4.32767 up down aenet --> reth1.32767 ge-0/0/5 up down ge-0/0/5.0 up down aenet --> reth2.0 ge-0/0/6 up down ge-0/0/6.0 up down aenet --> reth2.0 ge-0/0/7 up down ge-0/0/8 up down ge-0/0/9 up down ge-0/0/10 up down ge-0/0/11 up down ge-0/0/12 up down ge-0/0/13 up down ge-0/0/14 up down ge-0/0/15 up down ge-5/0/0 up down ge-5/0/1 up up ge-5/0/2 up up ge-5/0/2.0 up up aenet --> fab1.0 ge-5/0/3 up down ge-5/0/3.1000 up down aenet --> reth1.1000 ge-5/0/3.1001 up down aenet --> reth1.1001 ge-5/0/3.32767 up down aenet --> reth1.32767 ge-5/0/4 up down ge-5/0/4.1000 up down aenet --> reth1.1000 ge-5/0/4.1001 up down aenet --> reth1.1001 ge-5/0/4.32767 up down aenet --> reth1.32767 ge-5/0/5 up down ge-5/0/5.0 up down aenet --> reth2.0 ge-5/0/6 up down ge-5/0/6.0 up down aenet --> reth2.0 ge-5/0/7 up down ge-5/0/8 up down ge-5/0/9 up down ge-5/0/10 up down ge-5/0/11 up down ge-5/0/12 up down ge-5/0/13 up down ge-5/0/14 up down ge-5/0/15 up down fab0 up up fab0.0 up up inet 30.17.0.200/24 fab1 up up fab1.0 up up inet 30.18.0.200/24 fxp0 up down fxp1 up up fxp1.0 up up inet 129.16.0.1/2 tnp 0x1100001 fxp2 up up fxp2.0 up up tnp 0x1100001 gre up up ipip up up irb up up lo0 up up lo0.16384 up up inet 127.0.0.1 --> 0/0 lo0.16385 up up inet 10.0.0.1 --> 0/0 10.0.0.16 --> 0/0 128.0.0.1 --> 0/0 128.0.0.4 --> 0/0 128.0.1.16 --> 0/0 lo0.32768 up up lsi up up mtun up up pimd up up pime up up pp0 up up ppd0 up up ppe0 up up reth0 up down reth1 up down reth1.1000 up down inet 10.10.0.2/30 reth1.1001 up down inet reth1.32767 up down reth2 up down reth2.0 up down eth-switch st0 up up swfab0 up up swfab1 up up tap up up vlan up down vtep up up
{primary:node0}[edit]
root@NU-MDF-SRX345# show interfaces lt-0/0/0
unit 1 {
encapsulation ethernet;
peer-unit 2;
family inet {
address 10.10.0.5/30;
}
}
unit 2 {
encapsulation ethernet;
peer-unit 1;
family inet {
address 10.10.0.6/30;
}
}{primary:node0}[edit]
root@NU-MDF-SRX345# show protocols
ospf {
area 0.0.0.0 {
interface lt-0/0/0.1;
}
}{primary:node0}[edit]
root@NU-MDF-SRX345# show routing-instances RI-NU-MPLS
instance-type virtual-router;
interface lt-0/0/0.2;
interface reth1.1001;
routing-options {
autonomous-system 65010;
}
protocols {
ospf {
area 0.0.0.0 {
interface lt-0/0/0.2;
}
}
}{primary:node0}[edit]
root@NU-MDF-SRX345# show security zones
security-zone ZONE-NU-TRUST {
interfaces {
reth1.1000 {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
protocols {
ospf;
}
}
}
lt-0/0/0.1 {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
protocols {
ospf;
}
}
}
}
}
security-zone ZONE-NU-MPLS {
interfaces {
reth1.1001 {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
protocols {
ospf;
}
}
}
lt-0/0/0.2 {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
protocols {
ospf;
}
}
}
}
}{primary:node0}[edit]
root@NU-MDF-SRX345# show security policies
from-zone ZONE-NU-MPLS to-zone ZONE-NU-MPLS {
policy SECPOL-MPLS-TO-MPLS {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone ZONE-NU-TRUST to-zone ZONE-NU-TRUST {
policy SECPOL-TRUST-TO-TRUST {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}