Hi, really hoping someone can help me. I have a problem but I think it relates to this basic problem so rather than give the original problem with way too much configuration, can someone explain to me why I can't get a simple traceroute working between two Virtual Routers. I did a basic setup here:
Interfaces
[edit]
viet@srx220# show interfaces lt-0/0/0.100
encapsulation ethernet;
peer-unit 101;
family inet {
address 10.10.10.1/30;
}
[edit]
viet@srx220# show interfaces lt-0/0/0.101
encapsulation ethernet;
peer-unit 100;
family inet {
address 10.10.10.2/30;
}
Virtual Routers
[edit]
viet@srx220# show routing-instances TestRouter1
description "Test Router 1";
instance-type virtual-router;
interface lt-0/0/0.100;
[edit]
viet@srx220# show routing-instances TestRouter2
description "Test Router 2";
instance-type virtual-router;
interface lt-0/0/0.101;
Security Zones
[edit]
viet@srx220# show security zones security-zone TR1
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
interfaces {
lt-0/0/0.100;
}
[edit]
viet@srx220# show security zones security-zone TR2
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
interfaces {
lt-0/0/0.101;
}
Security Policies
[edit]
viet@srx220# show security policies from-zone TR1 to-zone TR2
policy TR1-TR2 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
[edit]
viet@srx220# show security policies from-zone TR2 to-zone TR1
policy TR2-TR1 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
Here are the route tables for both VR's:
[edit]
viet@srx220# run show route table TestRouter1.inet.0
TestRouter1.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.10.10.0/30 *[Direct/0] 00:26:52
> via lt-0/0/0.100
10.10.10.1/32 *[Local/0] 00:26:52
Local via lt-0/0/0.100
[edit]
viet@srx220# run show route table TestRouter2.inet.0
TestRouter2.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.10.10.0/30 *[Direct/0] 00:27:02
> via lt-0/0/0.101
10.10.10.2/32 *[Local/0] 00:27:02
Local via lt-0/0/0.101
Now, from TestRouter1 I am able to ping TestRouter2, but I cannot do a traceroute to it.
[edit]
viet@srx220# run ping routing-instance TestRouter1 10.10.10.2 count 3
PING 10.10.10.2 (10.10.10.2): 56 data bytes
64 bytes from 10.10.10.2: icmp_seq=0 ttl=64 time=2.347 ms
64 bytes from 10.10.10.2: icmp_seq=1 ttl=64 time=2.564 ms
64 bytes from 10.10.10.2: icmp_seq=2 ttl=64 time=2.314 ms
--- 10.10.10.2 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 2.314/2.408/2.564/0.111 ms
[edit]
viet@srx220# run traceroute routing-instance TestRouter1 10.10.10.2
traceroute to 10.10.10.2 (10.10.10.2), 30 hops max, 40 byte packets
1 * * *
2 * * *
3 * * *
4 * * *
^C
But it works if I trace (from TestRouter1) with source interface lt-0/0/0.101 (which belongs to TestRouter2) ???
[edit]
viet@srx220# run traceroute routing-instance TestRouter1 10.10.10.2 interface lt-0/0/0.101
traceroute to 10.10.10.2 (10.10.10.2), 30 hops max, 40 byte packets
1 10.10.10.2 (10.10.10.2) 1.062 ms 0.990 ms 3.638 ms
That does not make sense? There is a route to 10.10.10.2 (10.10.10.0/30) in TestRouter1's table so I shouldn't have to specify which interface to do a traceroute from I thought.
Would be great if someone can help me. This has been bugging me for days.