Ethernet Switching
Highlighted
Ethernet Switching

EX4550 and ICMP Traceroute Problems

‎10-13-2014 06:35 AM

Hello Junos Experts,

 

I have the following scenario that does not work for me.

 

An EX 4550 is in the border of the network connecting to 2 different ISPs and one LAN.

 

I am using Source Based Filtering and BGP on it. Everything works great but here comes the problem.

 

If I am on the inside I can ping everything on the internet, I can ping the EX box but if I use Traceroute to any internet address the EX box is not listed in the path (meaning is not sending the right packet, either Port-unreachable for Linux boxes or ICMP Time Exceeded for windows machines)

 

I am using an SVI interface for the LAN side where many gigabit ports are the members of that SVI.

 

JUNOS Base OS boot [12.3R7.7]

 

show system statistics icmp
fpc0:
--------------------------------------------------------------------------
icmp:
49 drops due to rate limit
80465 calls to icmp_error
0 errors not generated because old message was icmp
Output Histogram
113952 echo reply
30559 destination unreachable
49735 time exceeded
0 messages with bad code fields
0 messages less than the minimum length
5 messages with bad checksum
0 messages with bad source address
32 messages with bad length
0 echo drops with broadcast or multicast destinaton address
0 timestamp drops with broadcast or multicast destination address
Input Histogram
50279 echo reply
7474 destination unreachable
7 source quench
124 routing redirect
113952 echo
1653 time exceeded
113952 message responses generated

 

 

Example of Traceroute to google.com

 

# traceroute google.com
traceroute to google.com (74.125.239.5), 30 hops max, 60 byte packets
1 * * *
2 x.x.x.x.x (70.158.125.13) 0.718 ms 0.645 ms 0.636 ms
3 206.72.210.250 (206.72.210.250) 0.962 ms 0.971 ms 0.894 ms
4 206.72.210.41 (206.72.210.41) 0.660 ms 0.604 ms 0.574 ms
5 64.233.174.41 (64.233.174.41) 1.574 ms 1.439 ms 1.402 ms
6 216.239.43.148 (216.239.43.148) 0.829 ms 0.977 ms 1.124 ms
7 lax04s09-in-f5.1e100.net (74.125.239.5) 0.652 ms 0.567 ms 0.539 ms

 

What could be the issue of this box not responding properly?

 

Appreciate any help

 

Regards

1 REPLY 1
Highlighted
Ethernet Switching

Re: EX4550 and ICMP Traceroute Problems

‎10-14-2014 03:18 PM

Up.

 

Anyone?

 

Regards

Feedback