Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: No ping Proxy-ARP from LAN/DMZ

$
0
0

Hello,

 

I checked this link https://kb.juniper.net/InfoCenter/index?page=content&id=KB21785&actp=search and now i have more details for this problem :

>show security nat proxy-arp
interface ge-0/0/0.0 {
    address {
        XXX.XX.XX.91/32;
        XXX.XX.XX.93/32;
        XXX.XX.XX.94/32;
        XXX.XX.XX.92/32;
    }
}

But i can't ping these IP from firewall : 

> ping XXX.XX.XX.92
PING  XXX.XX.XX.92 ( XXX.XX.XX.92): 56 data bytes
ping: sendto: Can't assign requested address
ping: sendto: Can't assign requested address

When i checked route : 

> run show route XXX.XX.XX.92 extensive

inet.0: 30 destinations, 30 routes (30 active, 0 holddown, 0 hidden)
XXX.XX.XX.92/32 (1 entry, 1 announced)
TSI:
KRT in-kernel XXX.XX.XX.92/32 -> {}
        *Static Preference: 1
                Next hop type: Receive
                Address: 0x1175190
                Next-hop reference count: 12
                State: <Active Int ProxyArp>
                Age: 26:04
                Task: RPD Unix Domain Server./var/run/rpd_serv.local
                Announcement bits (2): 0-KRT 2-Resolve tree 1
                AS path: I

This is very strange... SRX don't see these IP.

Have you an idea ? 

 

Thank your for your help.

Best regards.

Charlie.


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>