Routing

last person joined: 5 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.
  • 1.  Problem with the GRE-tunnel

    Posted 04-11-2013 03:03

    tunnel is not established after breaking recovery link. Helps reboot the router or deactivation / activation the gre interface. 

     

    Model: j2320
    JUNOS Software Release [10.2R3.10]

     

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB15371&actp=search&viewlocale=en_US&searchid=1259482325493 

     

    it says that the version JUNOS 9.5r1 problem is fixed, but it is not true or I have an error in the configuration.

     

     

    Attachment(s)

    txt
    cfg_R2.txt   7 KB 1 version
    txt
    cfg_R1.txt   8 KB 1 version


  • 2.  RE: Problem with the GRE-tunnel

    Posted 04-11-2013 10:52

    What does the output "show interfaces gr-0/0/0 extensive" show"?

    What does "show route 10.10.1.13 detail" show?

    I see you that you have created the tunnel but ou do not have a route that directs trafic to use the tunnel.

    It maybe the tunnel interface is flapping in your case. You need to create a static route for traffic to the destination to use the gr-0/0/0 interface

    set routing-options static route 10.10.1.13 next-hop gr-0/0/0 preference 4



  • 3.  RE: Problem with the GRE-tunnel

    Posted 04-12-2013 00:28

    user@R1> show interfaces gr-0/0/0.13 extensive
    Logical interface gr-0/0/0.13 (Index 80) (SNMP ifIndex 533) (Generation 177)
    Description: Tunnel_to_SovGavan
    Flags: Point-To-Point SNMP-Traps 0x4000
    IP-Header 10.10.13.2:10.10.1.3:47:df:64:0000000000000000
    Encapsulation: GRE-NULL
    Gre keepalives configured: Off, Gre keepalives adjacency state: up
    Traffic statistics:
    Input bytes : 500610495
    Output bytes : 1445775607
    Input packets: 2524642
    Output packets: 2962740
    Local statistics:
    Input bytes : 926700
    Output bytes : 1259840
    Input packets: 12605
    Output packets: 12014
    Transit statistics:
    Input bytes : 499683795 1144 bps
    Output bytes : 1444515767 872 bps
    Input packets: 2512037 1 pps
    Output packets: 2950726 0 pps
    Security: Zone: trust
    Allowed host-inbound traffic : any-service bfd bgp dvmrp igmp ldp msdp nhrp
    ospf pgm pim rip router-discovery rsvp sap vrrp
    Flow Statistics :
    Flow Input statistics :
    Self packets : 11945
    ICMP packets : 173940
    VPN packets : 0
    Multicast packets : 0
    Bytes permitted by policy : 500609307
    Connections established : 2492
    Flow Output statistics:
    Multicast packets : 0
    Bytes permitted by policy : 1413939959
    Flow error statistics (Packets dropped due to):
    Address spoofing: 0
    Authentication failed: 0
    Incoming NAT errors: 0
    Invalid zone received packet: 0
    Multiple user authentications: 0
    Multiple incoming NAT: 0
    No parent for a gate: 0
    No one interested in self packets: 0
    No minor session: 0
    No more sessions: 0
    No NAT gate: 0
    No route present: 0
    No SA for incoming SPI: 0
    No tunnel found: 0
    No session for a gate: 0
    No zone or NULL zone binding 0
    Policy denied: 0
    Security association not active: 0
    TCP sequence number out of window: 0
    Syn-attack protection: 0
    User authentication errors: 0
    Protocol inet, MTU: 1476, Generation: 189, Route table: 0
    Flags: Sendbcast-pkt-to-re
    Output Filters: out-gr-0/0/0.13-o,
    Addresses, Flags: Is-Preferred Is-Primary
    Destination: 10.37.252.32/30, Local: 10.37.252.33,
    Broadcast: 10.37.252.35, Generation: 230

     

    At the moment of tunnels is working...

     

    Tunnel stops working, just like when removed the patching cord from the interface ge-0/0/0 and stick back. At the moment I can not do it.

     

    user@R1> show route 10.10.1.13 detail

    inet.0: 136 destinations, 159 routes (136 active, 0 holddown, 0 hidden)
    10.10.1.0/24 (1 entry, 0 announced)
    *Direct Preference: 0
    Next hop type: Interface
    Next-hop reference count: 1
    Next hop: via ge-0/0/0.0, selected
    State: <Active Int>
    Age: 1w0d 21:16:54
    Task: IF
    AS path: I

     

    But do not understand why?

     

     



  • 4.  RE: Problem with the GRE-tunnel
    Best Answer

    Posted 04-12-2013 02:17

    Hello,

    Please add following to Your config:

     

    set security flow route-change-timeout 6 

     

    http://www.juniper.net/techpubs/en_US/junos12.1/topics/reference/configuration-statement/security-edit-route-change-timeout.html

     

    HTH

    Thanks

    Alex



  • 5.  RE: Problem with the GRE-tunnel

    Posted 04-12-2013 04:09

    Thanks, I'll try.



  • 6.  RE: Problem with the GRE-tunnel

    Posted 04-16-2013 01:05

    Thank you very much! Really helped!