Hi guys,
I am facing a issue between a branch and HQ, we have on branch a srx 300 with 2 ISP, both are MPLS so the internet will access only from the HQ.
We created some rib groups to fail-over between to MPLS links and route all traffic to HQ, but, we are facing some looping when the traffic come back.
We have 3 interfaces connected on srx300 at branch, ge-0/0/0 (LAN - 10.13.0.0/20), ge-0/0/1 (MPLS1-192.168.13.1) and ge-0/0/2 (MPLS2-192.160.13.1).
I cant ping using lan interface (10.13.0.1) to the internet, but if I use the source interface MPLS1 or MPLS2 it works with no issue.
I attached the configuration of Interfaces and RIB and RI, also I am using the srx in the Packet-Based.
set interfaces ge-0/0/0 description "LAN" set interfaces ge-0/0/0 unit 0 family inet address 10.13.0.1/20 set interfaces ge-0/0/1 description "MPLS VIVO" set interfaces ge-0/0/1 unit 0 family inet address 192.168.13.1/24 set interfaces ge-0/0/2 description "MPLS WCS" set interfaces ge-0/0/2 unit 0 family inet address 192.160.13.1/24 set security forwarding-options family mpls mode packet-based set routing-options rib-groups ISP1-to-ISP2 import-rib ISP1.inet.0 set routing-options rib-groups ISP1-to-ISP2 import-rib ISP2.inet.0 set routing-options rib-groups ISP2-to-ISP1 import-rib ISP2.inet.0 set routing-options rib-groups ISP2-to-ISP1 import-rib ISP1.inet.0 set routing-instances ISP1 instance-type virtual-router set routing-instances ISP1 interface ge-0/0/1.0 set routing-instances ISP1 routing-options interface-routes rib-group inet ISP1-to-ISP2 set routing-instances ISP1 routing-options static route 0.0.0.0/0 next-hop 192.168.13.254 set routing-instances ISP2 instance-type virtual-router set routing-instances ISP2 interface ge-0/0/2.0 set routing-instances ISP2 routing-options interface-routes rib-group inet ISP2-to-ISP1 set routing-instances ISP2 routing-options static route 0.0.0.0/0 next-hop 192.160.13.254
here is the looping that I mentioned, looking from the HQ side.
omne@l02server001:~ $ omne@l02server001:~ $ traceroute 10.13.0.1 traceroute to 10.13.0.1 (10.13.0.1), 64 hops max 1 192.168.100.254 (192.168.100.254) 0.611ms 0.455ms 0.550ms 2 187.50.203.149 (187.50.203.149) 2.823ms 192.168.13.1 (192.168.13.1) 1.759ms 0.435ms 3 192.168.13.254 (192.168.13.254) 0.002ms 3.015ms 187.50.203.149 (187.50.203.149) 0.181ms 4 187.50.203.149 (187.50.203.149) 0.219ms 186.238.130.194 (186.238.130.194) 0.153ms 0.002ms 5 192.168.13.254 (192.168.13.254) 0.833ms 192.168.13.1 (192.168.13.1) 0.322ms 0.156ms 6 186.238.130.194 (186.238.130.194) 1.744ms 192.168.13.254 (192.168.13.254) 0.360ms 0.002ms 7 192.168.13.1 (192.168.13.1) 0.012ms 0.001ms 0.006ms 8 192.168.13.254 (192.168.13.254) 0.642ms 0.662ms 0.414ms 9 192.168.13.254 (192.168.13.254) 0.002ms 192.168.13.1 (192.168.13.1) 0.001ms 0.069ms 10 192.168.13.1 (192.168.13.1) 0.255ms 0.003ms 192.168.13.254 (192.168.13.254) 1.164ms 11 192.168.13.254 (192.168.13.254) 0.172ms 0.003ms 0.190ms 12 192.168.13.1 (192.168.13.1) 0.113ms 0.028ms 0.003ms 13 192.168.13.1 (192.168.13.1) 0.005ms 0.001ms 0.457ms 14 192.168.13.254 (192.168.13.254) 0.124ms 0.661ms 0.224ms 15 192.168.13.1 (192.168.13.1) 0.255ms 192.168.13.254 (192.168.13.254) 0.142ms 0.002ms 16 192.168.13.254 (192.168.13.254) 0.001ms 0.002ms 192.168.13.1 (192.168.13.1) 0.001ms 17 192.168.13.1 (192.168.13.1) 0.002ms 192.168.13.254 (192.168.13.254) 0.030ms 192.168.13.1 (192.168.13.1) 0.002ms 18 192.168.13.1 (192.168.13.1) 0.001ms 0.002ms 192.168.13.254 (192.168.13.254) 1.794ms 19 192.168.13.1 (192.168.13.1) 0.084ms 0.003ms 0.004ms 20 192.168.13.254 (192.168.13.254) 0.001ms 0.001ms 0.001ms 21 192.168.13.254 (192.168.13.254) 0.559ms 0.003ms 192.168.13.1 (192.168.13.1) 0.136ms 22 192.168.13.1 (192.168.13.1) 0.575ms 0.010ms 192.168.13.254 (192.168.13.254) 0.591ms 23 192.168.13.1 (192.168.13.1) 0.004ms 0.002ms 192.168.13.254 (192.168.13.254) 0.135ms 24 192.168.13.254 (192.168.13.254) 0.004ms 192.168.13.1 (192.168.13.1) 0.058ms 192.168.13.254 (192.168.13.254) 0.264ms 25 192.168.13.254 (192.168.13.254) 0.125ms 1.986ms 192.168.13.1 (192.168.13.1) 0.309ms 26 192.168.13.1 (192.168.13.1) 0.002ms 0.001ms 0.002ms 27 192.168.13.254 (192.168.13.254) 0.360ms 192.168.13.1 (192.168.13.1) 0.170ms 0.001ms 28 192.168.13.254 (192.168.13.254) 0.002ms 0.143ms 0.146ms 29 192.168.13.254 (192.168.13.254) 0.145ms 0.520ms 192.168.13.1 (192.168.13.1) 0.798ms 30 192.168.13.1 (192.168.13.1) 0.033ms 0.691ms 0.233ms 31 192.168.13.1 (192.168.13.1) 0.235ms 0.413ms 192.168.13.254 (192.168.13.254) 0.212ms 32 192.168.13.254 (192.168.13.254) 0.003ms 0.184ms 0.279ms 33 192.168.13.254 (192.168.13.254) 0.004ms 192.168.13.1 (192.168.13.1) 0.226ms 192.168.13.254 (192.168.13.254) 0.236ms 34 192.168.13.1 (192.168.13.1) 0.596ms 0.735ms 0.003ms 35 192.168.13.1 (192.168.13.1) 0.003ms 192.168.13.254 (192.168.13.254) 0.527ms 0.014ms 36 192.168.13.254 (192.168.13.254) 0.003ms 0.827ms 192.168.13.1 (192.168.13.1) 0.003ms 37 192.168.13.1 (192.168.13.1) 0.003ms 0.002ms 192.168.13.254 (192.168.13.254) 0.208ms 38 192.168.13.254 (192.168.13.254) 0.003ms 0.140ms 0.003ms 39 192.168.13.254 (192.168.13.254) 0.419ms 1.824ms 0.002ms 40 192.168.13.254 (192.168.13.254) 0.394ms 1.543ms 0.023ms 41 192.168.13.254 (192.168.13.254) 0.136ms 0.986ms 0.413ms 42 192.168.13.254 (192.168.13.254) 0.102ms 0.753ms 0.736ms 43 192.168.13.254 (192.168.13.254) 0.312ms 0.840ms 0.297ms 44 192.168.13.254 (192.168.13.254) 0.105ms 1.872ms 0.449ms 45 192.168.13.254 (192.168.13.254) 0.003ms 0.808ms 0.640ms 46 192.168.13.254 (192.168.13.254) 0.432ms 0.003ms 0.867ms 47 192.168.13.254 (192.168.13.254) 0.371ms 0.648ms 0.440ms 48 192.168.13.254 (192.168.13.254) 0.017ms 1.920ms 0.004ms 49 192.168.13.254 (192.168.13.254) 0.426ms 0.300ms 0.616ms 50 192.168.13.254 (192.168.13.254) 0.010ms 1.840ms 0.811ms 51 192.168.13.254 (192.168.13.254) 0.036ms 1.011ms 0.168ms 52 192.168.13.254 (192.168.13.254) 0.017ms 0.636ms 0.710ms 53 192.168.13.254 (192.168.13.254) 0.305ms 2.992ms 0.092ms 54 192.168.13.254 (192.168.13.254) 0.589ms 2.011ms 0.147ms 55 192.168.13.254 (192.168.13.254) 3.256ms 2.968ms 3.243ms 56 192.168.13.254 (192.168.13.254) 3.439ms ^C omne@l02server001:~ $ packet_write_wait: Connection to 201.28.150.165: Broken pipe AS28165-187-62-217-162:~ MSpinelli$
I uploaded the logs and RSI, on logs I cant found anything, but I am not sure if I made it correct. Someone can help me?
Thanks