Problem with ping in SRX210B

[rsilva]

Hi everyone,

I need yours achieved for solve my problem. I have this configuration in SRX210

show 

## Last changed: 2011-09-27 12:47:46 UTC

version 10.0R3.10;

system {

    host-name ROU-PLATCO;

    root-authentication {

        encrypted-password "............................"; ## SECRET-DATA

    }

    name-server {

        208.67.222.222;

        208.67.220.220;

    }

    services {

        ssh;

        telnet;

        web-management {

            http {

                interface vlan.0;

            }

            https {

                system-generated-certificate;

                interface vlan.0;

            }

        }

    }

    syslog {

        archive size 100k files 3;

        user * {

            any emergency;

        }

        file messages {

            any critical;

            authorization info;

        }

        file interactive-commands {

            interactive-commands error;

        }

    }

    max-configurations-on-flash 5;

    max-configuration-rollbacks 5;

    license {

        autoupdate {

            url https://ae1.juniper.net/junos/key_retrieval;

        }

    }

}

interfaces {

    interface-range interfaces-trust {

        member ge-0/0/1;

        member fe-0/0/3;

        member fe-0/0/4;

        member fe-0/0/5;

        member fe-0/0/6;

        member fe-0/0/7;

        unit 0 {

            family ethernet-switching;

        }

    }

    ge-0/0/0 {

        unit 0;

    }

    e1-1/0/0 {

        encapsulation cisco-hdlc;

        e1-options {

            framing g704;

        }

        unit 0 {

            family inet {

                address 192.168.41.222/30;

            }

        }

    }

}

routing-options {

    static {

        route 0.0.0.0/0 next-hop 192.168.41.221;

    }

}

[edit]

The SRX210 have interface E1 {admin UP} {link UP}, i can't ping at the next hot with ip 192.168.41.221. Why.? I don't understand, why.!!!

Help me please, i am rookie with Junos and Juniper.

Thanks,

[rsilva]

This srx is connected with router cisco  via interface E1.

[pk]

Hi

Did you put your interface in any security zone? For example,

set security zones security-zone untrust interfaces e1-1/0/0.0

[milind.mistry@essar…]

Assign E1 interface to the zone and put the required policy for the ping and other traffic..

Also check whether you are able to ping your own ip ..

[rsilva]

Thanks by  help... I can do ping right now...

Thanks so much,

[rsilva]

Excuse me, i can do ping since srx to router cisco, but i can't ping from router cisco to srx....

[pk · Accepted solution]

Use

set security zones security-zone untrust host-inbound-traffic system-services ping

Also, for transit traffic, you will need to set up security policies. See, e.g.

http://www.juniper.net/us/en/local/pdf/app-notes/3500153-en.pdf