Re: SRX300 series VLAN interface

Hi All,

Like the OP, I am configuring my first srx300. 

Have upgraded the software to 

Hostname: fw01
Model: srx300
Junos: 15.1X49-D70.3
JUNOS Software Release [15.1X49-D70.3]

My problem is that I am unable to reach / ping the IRB interface ( ip address ).

Is this a normal behaviour ? 

At this version of the OS, is the IRB interface routable now ? 

Can I use it as the gateway. 

All the ports in the vlans ( vlan trust) are up 

admin@fw01# run show vlans

Routing instance        VLAN name             Tag          Interfaces
default-switch          default               1
                                                           ge-0/0/3.0
                                                           ge-0/0/4.0
default-switch          trust                 10
                                                           ge-0/0/1.0*
                                                           ge-0/0/2.0*

admin@fw01# show vlans
trust {
    vlan-id 10;
    interface ge-0/0/1.0;
    interface ge-0/0/2.0;
    l3-interface irb.0;
}

IRB 0 is in the trust security zone and ping host bound traffic are allowed. 

pcadmin@jr-fw01# run show interfaces irb
Physical interface: irb    , Enabled, Physical link is Up
  Interface index: 130, SNMP ifIndex: 502
  Type: Ethernet, Link-level type: Ethernet, MTU: 1514
  Device flags   : Present Running
  Interface flags: SNMP-Traps
  Link type      : Full-Duplex
  Link flags     : None
  Current address: 40:71:83:2b:06:30, Hardware address: 40:71:83:2b:06:30
  Last flapped   : Never
    Input packets : 0
    Output packets: 0

  Logical interface irb.0 (Index 72) (SNMP ifIndex 532)
    Flags: Up SNMP-Traps 0x0 Encapsulation: ENET2
    Bandwidth: 1000mbps
    Routing Instance: default-switch Bridging Domain: trust
    Input packets : 192
    Output packets: 6
    Security: Zone: trust
    Allowed host-inbound traffic : bootp bfd bgp dns dvmrp igmp ldp msdp nhrp
    ospf pgm pim rip router-discovery rsvp sap vrrp dhcp finger ftp tftp
    ident-reset http https ike netconf ping reverse-telnet reverse-ssh rlogin
    rpm rsh snmp snmp-trap ssh telnet traceroute xnm-clear-text xnm-ssl lsping
    ntp sip r2cp webapi-clear-text webapi-ssl
    Protocol inet, MTU: 1500
      Flags: Sendbcast-pkt-to-re
      Addresses, Flags: Is-Preferred Is-Primary
        Destination: 10.12.8/24, Local: 10.12.8.1, Broadcast: 10.12.8.255

But no luck with the ping 

@rain:firmware[542]$ ping 10.12.8.1
PING 10.12.8.1 (10.12.8.1): 56 data bytes
ping: sendto: No route to host
ping: sendto: Host is down
Request timeout for icmp_seq 0
ping: sendto: Host is down
Request timeout for icmp_seq 1
ping: sendto: Host is down
Request timeout for icmp_seq 2
ping: sendto: Host is down
Request timeout for icmp_seq 3
^C

What else could be missing ? 

thanks in advance !