SRX Services Gateway
Highlighted
SRX Services Gateway

SRX loopback interface

‎09-29-2014 04:14 AM
Hi All, I have already created a loopback 0 interface on my srx3400 as below: set interfaces lo0 unit 0 family inet address 10.128.95.128/32 I want to create another loopback interface for other uses, is it possible to do it like this: set interfaces lo1 unit 0 family inet address 10.128.151.249/30 I didn't try it myself, but someone told me that it didn't work. may you please help me on how to create another loopback interface on srx3400. thank you in advance. Best Regards, Haitham Jneid
5 REPLIES 5
Highlighted
SRX Services Gateway

Re: SRX loopback interface

‎09-29-2014 04:16 AM

You can try below config.

 

root@SRX110-1# show interfaces lo0
unit 0 {
    family inet {
        address 10.128.95.128/32;
    }
}
unit 1 {
    family inet {
        address 10.128.151.249/30;
    }
}

 

 

lo0.0 for one customer lo0.1 for other.

 

Thanks,

Suraj

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too

 

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: SRX loopback interface

‎09-29-2014 05:59 AM

Hi,

 

It is possible. The only requirement is that your distinct lo0.X  units are associated with distinct routing-instances (or logical-system if your equipement supports them).

 

 

--
If this post solves your problem, please mark this post as "Accepted Solution".
Kudos are appreciated

Highlighted
SRX Services Gateway

Re: SRX loopback interface

‎09-29-2014 06:06 AM
The SRX only supports 1 loop back interface but you can set multiple IP addresses and then use the local-address command to reference it.
Please be aware if this is in a cluster and you want to terminate VPN'S On the loop back like you would On an ASA it is not supported but will work on a standalone box.
root@SRX110-1# show interfaces lo0
unit 0 {
family inet {
address 192.168.1.254;
Address 192.168.2.254;
}

And then if you were using this for terminating VPN's you would set the loop back as the interface and then add

Local-address 192.168.1.254----or whichever addresses you had configured you wanted to use

Hope this helps
SilentBob
Senior Security Engineer
Juniper Ambassador
JNCIS-SA, JNCIA-FWV, JNCIA-JUNOS
CCSA, CCSE CCEPE, CCNA, ACWA F5-CA
SRX Services Gateway

Re: SRX loopback interface

‎09-29-2014 09:00 AM

Hi, 

Thanks all.

 

I already used lo0 unit 0 in the default routing instance.

Can i create lo0 unit 1 and use it in a routing-instance of type virtual-router???

 

Please remember, i am using srx3400 active/passive chassis cluster.

 

Thank you for your help.

 

Regards,

Haitham

Highlighted
SRX Services Gateway
Solution
Accepted by topic author Haitham Jneid
‎08-26-2015 01:27 AM

Re: SRX loopback interface

‎10-01-2014 02:29 AM

hi, 

 

yes, you can configure lo0.0 in a VR and lo0.1 in another VR.

 

the following KB article uses lo0.0 in a VR and lo0.1 in another: http://kb.juniper.net/InfoCenter/index?page=content&id=KB21326&actp=RSS&smlogin=true

 

Regards,

Steph

Feedback