Routing

Hello everyone,

I run after this topic and documentation below but i can't make it work simply then I must miss something so, i wish some help after somedays with no results 🙂

archive topic : http://forums.juniper.net/t5/SRX-Services-Gateway/SRX-both-flow-and-packet-mode/m-p/51862#M5854
juniper documentation : https://www.juniper.net/us/en/local/pdf/app-notes/3500192-en.pdf

i followed mainly the configuration of the example page 8 of the documentation L3 MPLS VPN with Flow Services.

Here are the lab :

CE--------------PE3-------------P1-----------PE2--------------CE
EX              SRX240            M7i         SRX650       linux machine
1.1.220/30

I got a simple MP-BGP signaled MPLS with LDP so far.
Configuration are attached to the message. SRX are in 11.4R6.5 and 12.1R2.9.

Every routes for the L3VPN seems on both PE ok but I can't pass any traffic through my L3VPN. Ping won't pass through the VPN and I can't even ping between remote VRF (VRF(packet-based) of PE3 to VRF(packet-based) of PE2. I can provide any troubleshoot command asked. I could only point discard from the PFE but i don't know what's wrong in the configuration.

Thank you in advance!

brice@PE-3# run show pfe statistics traffic | grep "pps|drops|discard"
Packet Forwarding Engine traffic statistics:
    Input  packets:              1948744                   17 pps
    Output packets:                50093                    2 pps
    Software input control plane drops  :                    0
    Software input high drops           :                    0
    Software input medium drops         :                    0
    Software input low drops            :                    0
    Software output drops               :                    0
    Hardware input drops                :                    0
Packet Forwarding Engine hardware discard statistics:
    Timeout                    :                    0
    Normal discard             :               971143
    Extended discard           :                 1539
    Info cell drops            :                    0
    Fabric drops               :                    0



brice@PE-2# run show route table VPN protocol bgp
VPN-C1-CORE.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
1.1.3.0/30         *[BGP/170] 00:32:51, localpref 100, from 1.1.1.3
                      AS path: I
                    > to 1.1.12.1 via ge-0/0/2.0, Push 299936, Push 302528(top)
172.16.0.0/16      *[BGP/170] 00:32:51, localpref 100, from 1.1.1.3
                      AS path: I
                    > to 1.1.12.1 via ge-0/0/2.0, Push 299936, Push 302528(top)

brice@PE-3# run show route table PACKET protocol bgp

PACKET.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

1.1.0.0/30         *[BGP/170] 00:33:44, localpref 100, from 1.1.1.2
                      AS path: I
                    > to 1.1.13.1 via ge-0/0/1.0, Push 302096, Push 302480(top)
1.1.220.0/24       *[BGP/170] 00:33:44, localpref 100, from 1.1.1.2
                      AS path: I
                    > to 1.1.13.1 via ge-0/0/1.0, Push 302096, Push 302480(top)

brice@PE-3# run ping 1.1.0.1 routing-instance PACKET
PING 1.1.0.1 (1.1.0.1): 56 data bytes
^C
--- 1.1.0.1 ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss

Attachment(s)

PE-2.txt   5 KB 1 version

PE-3.txt   4 KB 1 version

P1.txt   4 KB 1 version

Hi,

You need to apply the packet mode filter to the core facing MPLS interfaces as well.  Both family inet and family mpls will require this.

Cheers,

Caillin

It was that... 

Read somewhere that MPLS packets automatically goes to packet base mode but it seems not or I misunderstood the thing, answers was in the old article i pointed but i miss the details cause i though it was irrelevant.

Thank you very much!!