SRX

Hi 

I am setting up LAB between SSG - SRX and OSPF is up and i see routes (loopback ip) are correctly installed.

But i can't ping to the ip from either SSG or SRX.

root@SRX_FW2> show route

inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0 *[Static/5] 00:20:55
> to 11.11.11.11 via fe-0/0/2.0
10.1.1.1/32 *[OSPF/10] 00:10:59, metric 2 ----------> FW1 Loopback IP
> to 11.11.11.11 via fe-0/0/2.0

root@SRX_FW2> ping 10.1.1.1
PING 10.1.1.1 (10.1.1.1): 56 data bytes
^C
--- 10.1.1.1 ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss

I attached my config file and can someone help?

Thank you!1

Attachment(s)

SSGFW1_OSPF.rtf   4 KB 1 version

SRX_FW2_OSPF.rtf   4 KB 1 version

Hello ,

As per the SRX configuration , I see that your have a trust to untrust policy , but for the ICMP to work , we need untrust to trust policy if we are sourcing the ping from loopback .

I think same applies to SSG also , So creat a bi-directional rule and try pinging the loopback , IP of SSG sourcing the SRx loopback :

ping 10.1.1.1 source 10.2.2.2

Thank you very much and it works!!

Spoiler

Spoiler