When i simply try to add ip addresses(ipv4 or ipv6) an interface(PC host side, or wireless AP side) the interface stops functioning. I know I have MSTP so right now i have to exclude an interface first to add the ip address to an interface.
Example:
using the j-web interface i try to add an ipv4 address to ge-0/0/10.0 and the interface will no longer function properly.
Also the same from the command line.
It seems to be this way even if I use the default config without my changes.
Am i imagining things? Should it work? If i add an ip address right now the
interface will not pass traffic to my Asus RT-AC68U in AP mode.
It seems as though if i plugged in a PC to that same port after adding the address
that the interface will not function but i must recheck.
## Last changed: 2017-03-16 07:18:29 PDT
version 11.4R7.5;
system {
host-name MySRX240;
root-authentication {
encrypted-password "$1$Z3iAza5o$cT0fh8SK2acQwgUA7PNC60";
}
name-server {
75.75.75.75;
75.75.76.76;
}
login {
user adrian {
full-name "adrian aguinaga";
uid 2000;
class super-user;
authentication {
encrypted-password "$1$xo3TYJWi$DS7W/XJnM.XeEVnnCqQB01";
}
}
}
services {
ssh;
telnet;
xnm-clear-text;
dns {
max-cache-ttl 604800;
max-ncache-ttl 604800;
}
web-management {
http {
interface vlan.0;
}
https {
system-generated-certificate;
interface vlan.0;
}
}
dhcp {
router {
192.168.1.1;
}
pool 192.168.1.0/24 {
address-range low 192.168.1.2 high 192.168.1.254;
}
propagate-settings ge-0/0/0.0;
}
}
syslog {
archive size 100k files 3;
user * {
any emergency;
}
file messages {
any critical;
authorization info;
}
file interactive-commands {
interactive-commands error;
}
}
max-configurations-on-flash 5;
max-configuration-rollbacks 5;
license {
autoupdate {
url https://ae1.juniper.net/junos/key_retrieval;
}
}
}
interfaces {
interface-range APs {
member ge-0/0/14;
member ge-0/0/15;
}
ge-0/0/0 {
unit 0 {
family inet {
dhcp;
}
family inet6 {
address 2601:204:ce00:5550:3:5cff:fe62:da46/64;
address 2001:558:5516:37:3:5cff:fe62:da46/64;
address fe80::3:5cff:fe62:da46/64;
}
}
}
ge-0/0/1 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/2 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/3 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/4 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/5 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/6 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/7 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/8 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/9 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/10 {
unit 0 {
description "Unit 0";
family ethernet-switching {
port-mode access;
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/11 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/12 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/13 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/14 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
ge-0/0/15 {
unit 0 {
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}
lo0 {
unit 0 {
family inet6 {
address 2601:204:ce00:5550:1:5cff:fe62:da46/64;
address 2001:558:5516:37:1:5cff:fe62:da46/64;
address fe80::1:5cff:fe62:da46/64;
}
}
}
vlan {
unit 0 {
family inet {
address 192.168.1.1/24;
}
family inet6 {
address 2601:204:ce00:5550:2:5cff:fe62:da46/64;
address 2001:558:5516:37:2:5cff:fe62:da46/64;
address fe80::2:5cff:fe62:da46/64;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 192.168.1.1;
route 192.168.1.0/24 next-hop [ 192.168.1.8 192.168.1.9 ];
route 192.168.1.8/32 next-hop [ 192.168.1.0 192.168.1.50 192.168.1.60 192.168.1.67 ];
route 192.168.1.9/32 next-hop [ 192.168.1.0 192.168.1.36 192.168.1.90 ];
route 192.168.1.11/32 next-hop 192.168.1.30;
route 192.168.1.30/32 next-hop [ 192.168.1.11 192.168.1.50 ];
route 192.168.1.36/32 next-hop 192.168.1.9;
route 192.168.1.50/32 next-hop [ 192.168.1.8 192.168.1.30 ];
route 192.168.1.60/32 next-hop 192.168.1.8;
route 192.168.1.67/32 next-hop 192.168.1.8;
route 192.168.1.90/32 next-hop 192.168.1.9;
}
forwarding-table {
export DestinationLoadBalance;
}
}
protocols {
router-advertisement {
interface vlan.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550:2:5cff:fe62:da46/64;
prefix 2001:558:5516:37:2:5cff:fe62:da46/64;
prefix fe80::2:5cff:fe62:da46/64;
prefix 2601:204:ce00:5550::1/64;
prefix 2001:558:5516:37::1/64;
prefix fe80::1/64;
}
interface ge-0/0/0.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550:3:5cff:fe62:da46/64;
prefix 2001:558:5516:37:3:5cff:fe62:da46/64;
prefix fe80::3:5cff:fe62:da46/64;
prefix 2601:204:ce00:5550::1/64;
prefix 2001:558:5516:37::1/64;
prefix fe80::1/64;
}
interface lo0.0 {
prefix 2601:204:ce00:5550:1:5cff:fe62:da46/64;
prefix 2001:558:5516:37:1:5cff:fe62:da46/64;
prefix fe80::1:5cff:fe62:da46/64;
prefix 2601:204:ce00:5550::1/64;
prefix 2001:558:5516:37::1/64;
prefix fe80::1/64;
}
interface ge-0/0/14.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550:1:5cff:fe62:da46/64;
prefix 2001:558:5516:37:1:5cff:fe62:da46/64;
prefix fe80::1:5cff:fe62:da46/64;
prefix fe80::2:5cff:fe62:da46/64;
prefix 2601:204:ce00:5550::1/64;
prefix 2001:558:5516:37::1/64;
prefix fe80::1/64;
}
interface ge-0/0/15.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550:1:5cff:fe62:da46/64;
prefix 2001:558:5516:37:1:5cff:fe62:da46/64;
prefix fe80::1:5cff:fe62:da46/64;
prefix fe80::2:5cff:fe62:da46/64;
prefix 2601:204:ce00:5550::1/64;
prefix 2001:558:5516:37::1/64;
prefix fe80::1/64;
}
interface ge-0/0/13.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/12.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/11.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/10.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/9.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/8.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/7.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/6.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/5.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/4.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/3.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/2.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
interface ge-0/0/1.0 {
other-stateful-configuration;
prefix 2601:204:ce00:5550::/64;
prefix 2001:558:5516:37::/64;
prefix fe80::/64;
}
}
pim {
rp {
auto-rp discovery;
}
interface vlan.0 {
mode dense;
}
interface ge-0/0/0.0 {
mode dense;
}
interface ge-0/0/14.0 {
mode dense;
}
interface ge-0/0/15.0 {
mode dense;
}
interface ge-0/0/13.0 {
mode dense;
}
interface ge-0/0/12.0 {
mode dense;
}
interface ge-0/0/11.0 {
mode dense;
}
interface ge-0/0/10.0 {
mode dense;
}
interface ge-0/0/9.0 {
mode dense;
}
interface ge-0/0/8.0 {
mode dense;
}
interface ge-0/0/7.0 {
mode dense;
}
interface ge-0/0/6.0 {
mode dense;
}
interface ge-0/0/5.0 {
mode dense;
}
interface ge-0/0/4.0 {
mode dense;
}
interface ge-0/0/3.0 {
mode dense;
}
interface ge-0/0/2.0 {
mode dense;
}
interface ge-0/0/1.0 {
mode dense;
}
}
stp {
disable;
bridge-priority 4k;
max-age 20;
hello-time 2;
forward-delay 15;
interface all {
priority 112;
cost 19;
mode shared;
edge;
}
}
mstp {
configuration-name mst1;
revision-level 1;
max-hops 30;
max-age 20;
hello-time 2;
forward-delay 15;
bridge-priority 4k;
interface ge-0/0/1.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/2.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/3.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/4.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/5.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/6.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/7.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/8.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/9.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/10.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/11.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/12.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/13.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/14.0 {
priority 112;
mode shared;
edge;
}
interface ge-0/0/15.0 {
priority 112;
mode shared;
edge;
}
msti 1 {
bridge-priority 4k;
vlan vlan-trust;
interface all {
priority 112;
}
}
}
igmp-snooping {
vlan all {
query-interval 8;
query-last-member-interval 9;
query-response-interval 10;
robust-count 4;
immediate-leave;
interface all {
multicast-router-interface;
}
}
}
}
policy-options {
policy-statement DestinationLoadBalance {
then {
load-balance per-packet;
}
}
}
security {
address-book {
MyNetwork {
address MyNetwork {
range-address 192.168.1.2 {
to {
192.168.1.254;
}
}
}
attach {
zone trust;
}
}
}
forwarding-options {
family {
inet6 {
mode flow-based;
}
}
}
screen {
ids-option untrust-screen {
icmp {
ping-death;
}
ip {
source-route-option;
tear-drop;
}
tcp {
syn-flood {
alarm-threshold 1024;
attack-threshold 200;
source-threshold 1024;
destination-threshold 2048;
timeout 20;
}
land;
}
}
}
nat {
source {
address-persistent;
interface {
port-overloading off;
}
rule-set trust-to-untrust {
from zone trust;
to zone untrust;
rule source-nat-rule {
match {
source-address 0.0.0.0/0;
}
then {
source-nat {
interface {
persistent-nat {
permit any-remote-host;
}
}
}
}
}
}
}
}
policies {
from-zone trust to-zone untrust {
policy trust-to-untrust {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
}
zones {
security-zone trust {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
interfaces {
vlan.0 {
host-inbound-traffic {
protocols {
igmp;
pim;
}
}
}
ge-0/0/14.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/15.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/13.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/12.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/11.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/9.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/8.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/7.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/6.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/5.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/4.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/3.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/2.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
ge-0/0/1.0 {
host-inbound-traffic {
protocols {
pim;
igmp;
}
}
}
lo0.0 {
host-inbound-traffic {
protocols {
igmp;
pim;
}
}
}
ge-0/0/10.0 {
host-inbound-traffic {
protocols {
igmp;
}
}
}
}
}
security-zone untrust {
screen untrust-screen;
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
system-services {
dhcp;
tftp;
}
protocols {
pim;
igmp;
}
}
}
}
}
}
}
vlans {
vlan-trust {
vlan-id 3;
l3-interface vlan.0;
}
}