Routing
Reply
Contributor
rsilva
Posts: 25
Registered: ‎09-27-2011
0
Accepted Solution

Problem with ping in SRX210B

Hi everyone,

I need yours achieved for solve my problem. I have this configuration in SRX210

 

show 
## Last changed: 2011-09-27 12:47:46 UTC
version 10.0R3.10;
system {
    host-name ROU-PLATCO;
    root-authentication {
        encrypted-password "............................"; ## SECRET-DATA
    }
    name-server {
        208.67.222.222;
        208.67.220.220;
    }
    services {
        ssh;
        telnet;
        web-management {
            http {
                interface vlan.0;
            }
            https {
                system-generated-certificate;
                interface vlan.0;
            }
        }
    }
    syslog {
        archive size 100k files 3;
        user * {
            any emergency;
        }
        file messages {
            any critical;
            authorization info;
        }
        file interactive-commands {
            interactive-commands error;
        }
    }
    max-configurations-on-flash 5;
    max-configuration-rollbacks 5;
    license {
        autoupdate {
        }
    }
}
interfaces {
    interface-range interfaces-trust {
        member ge-0/0/1;
        member fe-0/0/3;
        member fe-0/0/4;
        member fe-0/0/5;
        member fe-0/0/6;
        member fe-0/0/7;
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/0 {
        unit 0;
    }
    e1-1/0/0 {
        encapsulation cisco-hdlc;
        e1-options {
            framing g704;
        }
        unit 0 {
            family inet {
                address 192.168.41.222/30;
            }
        }
    }
}
routing-options {
    static {
        route 0.0.0.0/0 next-hop 192.168.41.221;
    }
}
[edit]
The SRX210 have interface E1 {admin UP} {link UP}, i can't ping at the next hot with ip 192.168.41.221. Why.? I don't understand, why.!!!
Help me please, i am rookie with Junos and Juniper.
Thanks,
Contributor
rsilva
Posts: 25
Registered: ‎09-27-2011
0

Re: Problem with ping in SRX210B

This srx is connected with router cisco  via interface E1.

Distinguished Expert
Distinguished Expert
pk
Posts: 793
Registered: ‎10-09-2008
0

Re: Problem with ping in SRX210B

Hi

 

Did you put your interface in any security zone? For example,

 

set security zones security-zone untrust interfaces e1-1/0/0.0

Best Regards,
Petr (PK)

Juniper Ambassador, Juniper Networks Certified Instructor,
JNCIE-SEC #98, JNCIE-ENT #393, JNCIE-SP #2253
[Juniper Authorized Education & Support in Russia]
Contributor
milind.mistry@essar.com
Posts: 53
Registered: ‎12-24-2010
0

Re: Problem with ping in SRX210B

Assign E1 interface to the zone and put the required policy for the ping and other traffic..

 

Also check whether you are able to ping your own ip ..

 

 

Contributor
rsilva
Posts: 25
Registered: ‎09-27-2011
0

Re: Problem with ping in SRX210B

Thanks by  help... I can do ping right now...

 

Thanks so much,

 

:smileyhappy:

Contributor
rsilva
Posts: 25
Registered: ‎09-27-2011
0

Re: Problem with ping in SRX210B

Excuse me, i can do ping since srx to router cisco, but i can't ping from router cisco to srx....

Distinguished Expert
Distinguished Expert
pk
Posts: 793
Registered: ‎10-09-2008
0

Re: Problem with ping in SRX210B

Use

 

set security zones security-zone untrust host-inbound-traffic system-services ping

 

Also, for transit traffic, you will need to set up security policies. See, e.g.

 

http://www.juniper.net/us/en/local/pdf/app-notes/3500153-en.pdf

Best Regards,
Petr (PK)

Juniper Ambassador, Juniper Networks Certified Instructor,
JNCIE-SEC #98, JNCIE-ENT #393, JNCIE-SP #2253
[Juniper Authorized Education & Support in Russia]
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.