SRX Services Gateway
Highlighted
SRX Services Gateway

I doubt in configuring irb interfaces, why doesn't it ping me?

‎10-18-2019 03:31 AM

Good afternoon, can someone tell me why I get ping 192.168.100.10 and 192.168.8.1 no? if they are configured the same and another question, is it possible to add several interfaces to a virtual router? Thanks in advance

 


root# show
## Last changed: 2019-10-18 12:07:40 UTC
version 12.3X48-D85.1;


interfaces {

ge-0/0/4 {
        vlan-tagging;
        unit 0 {
              family bridge {
                     interface-mode trunk;
                     vlan-id-list [ 2500 3500 ];
              }
         }
  }
ge-0/0/5 {
        vlan-tagging;
        unit 0 {
               family bridge {
                    interface-mode trunk;
                    vlan-id-list [ 2500 3500  ];
                }
           }
    }
irb  {
        unit 2500 {
               family inet {
                      address 192.168.100.10/24;
               }
          }
unit 3500 {
        family inet {
               address 192.168.8.1/24;
        }
  }

routing-instances {
VRPRUEBA {
          instance-type virtual-router;
          interface irb.2500;
}


bridge-domains {
Mybridge {
         vlan-id 2500;
          routing-interface irb.2500;
}
Mybridge2 {
          vlan-id 3500;
          routing-interface irb.3500;
}
}
vlans {
        VLAN2500 {
              vlan-id 2500;
              interface {
                     irb.2500;
           }
              l3-interface irb.2500;
}
VLAN3500 {
        vlan-id 3500;
        interface {
                irb.3500;
      }
l3-interface irb.3500;
}

[edit]
root#

 

 

Is it possible to add more than one interface to a virtual router? Thanks again

 

3 REPLIES 3
Highlighted
SRX Services Gateway

Re: I doubt in configuring irb interfaces, why doesn't it ping me?

[ Edited ]
‎10-18-2019 01:00 PM

Hi,

 

Yes you can have more than one interface in a virtual-router. However, to help you with the ping situation I need to better understand your topology that I assume it looks like this, please confirm this:

 

HostA-(192.168.100.X)----|
                         |                         irb.2500 (192.168.100.10)
                      Switch----------(ge-0/0/4)-SRX
	                 |                         irb.3500 (192.168.8.1)
HostB-(192.168.8.X)------|

 

Are you trying to ping 192.168.100.10 and 192.168.8.1 from only one host? (lets say Host A)  If so, we need to note that irb.2500 is under a virtual-router hence it is not aware of the subnet linked to irb.3500 unless we include irb.3500 in the same virtual router or configure a mechanism to make sure virtual-router VRPRUEBA knows about irb.3500 subnet.

 

Also I can see that you are using family bridge on your physical interfaces? are you configuring transparent mode in that SRX? I believe they should be family ethernet-switching.

 

Highlighted
SRX Services Gateway

Re: I doubt in configuring irb interfaces, why doesn't it ping me?

[ Edited ]
‎10-19-2019 09:10 AM

Hi
lpaniagua.
What I intend with my topology is in an interface, to have 2 or more virtual routers that distribute ips with DHCP server regardless of the VLAN they access, what they ask me is to bridge that interface to host several interfaces, I am a Little confusing if it would be the best way but it is what I need.



Are you trying to ping 192.168.100.10 and 192.168.8.1? I am doing it from Juniper host using run ping 196.168.8.1 and not using run ping 196.168.8.1 routing-instance myvirtualrouter.

 I do not understand why when pinging 192.168.8.1 he answers:

root# run ping 192.168.8.1
PING 192.168.8.1 (192.168.8.1): 56 data bytes
ping: sendto: No route to host
ping: sendto: No route to host
ping: sendto: No route to host
^C
--- 192.168.8.1 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss

 

 

I tried to do it in transparent mode but it told me that I could not create virtual routers on that interface if I remember correctly.

 

Thanks!!

 

 

Highlighted
SRX Services Gateway

Re: I doubt in configuring irb interfaces, why doesn't it ping me?

[ Edited ]
‎10-23-2019 11:35 PM

C0d3,

 

Im not sure if I understand this: "they ask me is to bridge that interface to host several interfaces"

 

When you say "bridge", you mean configure an interface with family bridge?

Or do you mean to make that interface transport traffic from different vlans?

Or do you mean to have different sub-interfaces on a single physical interface?

 

Please check the Router-on-a-Stick solution on this forum and let me know if you are looking for something similar:

 

https://forums.juniper.net/t5/SRX-Services-Gateway/configure-802-1q-trunk-in-SRX345/m-p/469605#M5553...

 

Note that in that Router-on-a-Stick solution you could configure the different sub-units on different Virtual-Routers but I mean different Routing-Instances we I say different VIrtua-Routers. Those subunits could also act as DHCP servers on each subnet.

 

Feedback