SRX Services Gateway
Highlighted
SRX Services Gateway

ping: sendto: Operation not permitted

‎10-23-2014 06:36 AM

Goor morning,

 

i try to configure a routing-instance with a firewall filter, but whem i try to ping a destination 200.130.6.181/32, i receive the follow menssage:

 

# run ping 200.130.6.181     
PING 200.130.6.181 (200.130.6.181): 56 data bytes
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
^C
--- 200.130.6.181 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss

 

My config is:

 

# show interfaces ge-0/0/4  
description WAN;
unit 0 {
    family inet {
        filter {
            input filter-in;
            output internet-isp2;
        }

 

# show firewall filter internet-isp2
term to-isp2 {
    from {
        destination-address {
            200.130.6.181/32;
        }
    }
    then {
        count internet-isp2;
        routing-instance ISP2;
    }
}
term accept-others {
    then accept;
}

 

# show routing-instances ISP2
instance-type virtual-router;
interface ge-0/0/5.620;
routing-options {
    static {
        route 0.0.0.0/0 {
            next-hop x.x.x.x;
            qualified-next-hop y.y.y.y {
                preference 10;
            }
        }
    }
}

6 REPLIES 6
Highlighted
SRX Services Gateway

Re: ping: sendto: Operation not permitted

‎10-23-2014 06:43 AM

Can you try the ping specifying interface?

# run ping 200.130.6.181   interface ge-0/0/4

 

Thanks,

Suraj

 

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: ping: sendto: Operation not permitted

‎10-23-2014 07:11 AM

Same message of error

 

 

> ping 200.130.6.181 interface ge-0/0/4
PING 200.130.6.181 (200.130.6.181): 56 data bytes
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
^C
--- 200.130.6.181 ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss

 

Thank's for the help

Highlighted
SRX Services Gateway

Re: ping: sendto: Operation not permitted

‎10-23-2014 07:13 AM

I try to ping with

 

1> ping 200.130.6.181 routing-instance VIACOM
PING 200.130.6.181 (200.130.6.181): 56 data bytes
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
ping: sendto: Operation not permitted
^C
--- 200.130.6.181 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss

 

but don't work

Highlighted
SRX Services Gateway

Re: ping: sendto: Operation not permitted

‎10-26-2014 10:29 PM

Can you please provide me below output

 


root> show route 200.130.6.181 | no-more

 

Thanks,

Suraj

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: ping: sendto: Operation not permitted

‎10-27-2014 01:00 PM

root@FW-CD# run show route 200.130.6.181 | no-more

inet.0: 17 destinations, 19 routes (17 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0          *[Static/1] 2d 23:07:06, metric2 0
                    > to xxx.xxx.xxx.xxx via ge-0/0/1.0
                    [Static/5] 2d 23:08:41
                    > to xxx.xxx.xxx.xxx via ge-0/0/1.0

 

Thanks

Highlighted
SRX Services Gateway

Re: ping: sendto: Operation not permitted

‎11-22-2014 05:56 AM

Hello,

Firewall filter applied on the out going interface in the output direction is creating problem here, i mean blocking ICMP.

Please accept ICMP in the filter to get rid of this error.

 

 

-CK

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too

Feedback