Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

SRX1500: IRB interfaces and Ping issues between directly connected interfaces.

$
0
0

Hi , I have 2 SRX1500 configured in l2-learning to mode "switching"

 

I created 3 vlans and set l3-interfaces irb 

 

SRX1:

set interfaces ge-0/0/4 unit 0 family ethernet-switching vlan members VLAN12
set interfaces ge-0/0/8 description "To sfrcore01"
set interfaces ge-0/0/8 ether-options 802.3ad ae0
set interfaces ge-0/0/9 description "To sfrcore01"
set interfaces ge-0/0/9 ether-options 802.3ad ae0
set interfaces ge-0/0/10 description "TO sfrcore02"
set interfaces ge-0/0/10 ether-options 802.3ad ae1
set interfaces ge-0/0/11 description "TO sfrcore02"
set interfaces ge-0/0/11 ether-options 802.3ad ae1
set interfaces ae0 aggregated-ether-options minimum-links 1
set interfaces ae0 aggregated-ether-options link-speed 1g
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 aggregated-ether-options lacp periodic fast
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members VLAN100
set interfaces ae0 unit 0 family ethernet-switching vlan members VLAN12
set interfaces ae1 aggregated-ether-options minimum-links 1
set interfaces ae1 aggregated-ether-options link-speed 1g
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 aggregated-ether-options lacp periodic fast
set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae1 unit 0 family ethernet-switching vlan members VLAN200
set interfaces ae1 unit 0 family ethernet-switching vlan members VLAN12
set interfaces irb unit 12 family inet address 10.10.12.3/24
set interfaces irb unit 100 family inet address 10.10.10.3/24
set interfaces irb unit 200 family inet address 10.10.20.3/24

 

SRX2:

 

set interfaces ge-0/0/4 unit 0 family ethernet-switching vlan members VLAN12
set interfaces ge-0/0/8 description "To sfrcore01"
set interfaces ge-0/0/8 ether-options 802.3ad ae0
set interfaces ge-0/0/9 description "To sfrcore01"
set interfaces ge-0/0/9 ether-options 802.3ad ae0
set interfaces ge-0/0/10 description "TO sfrcore02"
set interfaces ge-0/0/10 ether-options 802.3ad ae1
set interfaces ge-0/0/11 description "TO sfrcore02"
set interfaces ge-0/0/11 ether-options 802.3ad ae1
set interfaces ae0 aggregated-ether-options minimum-links 1
set interfaces ae0 aggregated-ether-options link-speed 1g
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 aggregated-ether-options lacp periodic fast
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members VLAN100
set interfaces ae0 unit 0 family ethernet-switching vlan members VLAN12
set interfaces ae1 aggregated-ether-options minimum-links 1
set interfaces ae1 aggregated-ether-options link-speed 1g
set interfaces ae1 aggregated-ether-options lacp active
set interfaces ae1 aggregated-ether-options lacp periodic fast
set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae1 unit 0 family ethernet-switching vlan members VLAN200
set interfaces ae1 unit 0 family ethernet-switching vlan members VLAN12
set interfaces irb unit 12 family inet address 10.10.12.1/24
set interfaces irb unit 100 family inet address 10.10.10.1/24
set interfaces irb unit 200 family inet address 10.10.20.1/24

 

The irb interfaces are in a security zone and policies to allow everything between the zone written on both SRXs individually. Also my ae0, ae1 and ge-0/0/4 interfaces are connected directly and are up. But i am not able to ping between SRX using the irb IPs.

 

SRX1:

run show interfaces terse | match ae
ge-0/0/8.0 up up aenet --> ae0.0
ge-0/0/9.0 up up aenet --> ae0.0
ge-0/0/10.0 up up aenet --> ae1.0
ge-0/0/11.0 up up aenet --> ae1.0
ae0 up up
ae0.0 up up eth-switch
ae1 up up
ae1.0 up up eth-switch

[edit]
run show interfaces terse | match irb
irb up up
irb.12 up up inet 10.10.12.3/24
irb.100 up up inet 10.10.10.3/24
irb.200 up up inet 10.10.20.3/24

[edit]
run show interfaces terse | match ge-0/0/4
ge-0/0/4 up up
ge-0/0/4.0 up up eth-switch

 

SRX2:

run show interfaces terse | match ae
ge-0/0/8.0 up up aenet --> ae0.0
ge-0/0/9.0 up up aenet --> ae0.0
ge-0/0/10.0 up up aenet --> ae1.0
ge-0/0/11.0 up up aenet --> ae1.0
ae0 up up
ae0.0 up up eth-switch
ae1 up up
ae1.0 up up eth-switch

[edit]
run show interfaces terse | match irb
irb up up
irb.12 up up inet 10.10.12.1/24
irb.100 up up inet 10.10.10.1/24
irb.200 up up inet 10.10.20.1/24

[edit]
run show interfaces terse | match ge-0/0/4
ge-0/0/4 up up
ge-0/0/4.0 up up eth-switch

 

 

Can anyone help.

thanks

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>