SRX

I am practicing the vSRX configuration....

Um.. I don't know why can not PING between R1 to R2 ping 

Is it license problem ?? 

Help me .. 

 

# Network Diagram

 

R1 ---- vSRX ---- R2

 

Connected R1's eth0/0 to vSRX GE-0/0/1

Connected R2's set0/0 to vSRX GE-0/0/2

 

# R1 config

interface eth0/0

 ip address 192.168.10.2 255.255.255.0

!

ip route 0.0.0.0 0.0.0.0 192.168.10.1

 

# R2 config

interface eth0/0

 ip address 192.168.20.2 255.255.255.0

!

ip route 0.0.0.0 0.0.0.0 192.168.20.1

 

# vSRX config

 

version 18.2R1.9;

system {

    root-authentication {

        encrypted-password “xxxxx”

    }

    services {

        ssh {

            root-login allow;

            protocol-version v2;

        }

        web-management {

            http {

                interface fxp0.0;

            }

        }

    }

 

    license {

        autoupdate {

            url https://ae1.juniper.net/junos/key_retrieval;

        }

    }

}

security {

    policies {                          

        from-zone Trust to-zone Untrust {

            policy T_TO_U {

                match {

                    source-address any;

                    destination-address any;

                    application any;

                }

                then {

                    permit;

                }

            }

        }

        from-zone Untrust to-zone Trust {

            policy U_TO_T {

                match {

                    source-address any;

                    destination-address any;

                    application any;

                }

                then {

                    permit;

                }

            }

        }

    }

    zones {

        security-zone Trust {

            host-inbound-traffic {

                system-services {

                    all;

                }

                protocols {

                    all;

                }

            }

            interfaces {                

                ge-0/0/2.0;

            }

        }

        security-zone Untrust {

            host-inbound-traffic {

                system-services {

                    all;

                }

                protocols {

                    all;

                }

            }

            interfaces {

                ge-0/0/1.0;

            }

        }

    }

}

interfaces {

    ge-0/0/1 {

        unit 0 {

            family ethernet-switching {

                interface-mode access;

                vlan {

                    members VLAN_10;

                }

            }

        }

    }

    ge-0/0/2 {

        unit 0 {

            family ethernet-switching {

                interface-mode access;

                vlan {

                    members VLAN_20;

                }                       

            }

        }

    }

    fxp0 {

        unit 0 {

            family inet {

                address 172.16.100.130/24;

            }

        }

    }

    irb {

        unit 10 {

            family inet {

                address 192.168.10.1/24;

            }

        }

        unit 20 {

            family inet {

                address 192.168.20.1/24;

            }

        }

    }

}

routing-options {

    static {

        route 0.0.0.0/0 next-hop 172.16.100.2;

    }

}

vlans {

    VLAN_10 {

        vlan-id 10;

        l3-interface irb.10;

    }

    VLAN_20 {

        vlan-id 20;

        l3-interface irb.20;            

    }

}

!

# vSRX lincense status

root> show system license
License usage:
Licenses Licenses Licenses Expiry
Feature name used installed needed
logical-system 1 0 1 permanent
Virtual Appliance 1 1 0 46 days
Sky ATP 1 0 1 invalid
remote-access-ipsec-vpn-client 0 2 0 permanent

Licenses installed:
License identifier: E420588955
License version: 4
Software Serial Number: 20150625
Customer ID: vSRX-JuniperEval
Features:
Virtual Appliance - Virtual Appliance
count-down, Original validity: 60 days

 

# vSRX route

root> show route

inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0 *[Static/5] 00:26:20
> to 172.16.100.2 via fxp0.0
172.16.100.0/24 *[Direct/0] 00:26:20
> via fxp0.0
172.16.100.130/32 *[Local/0] 00:26:20
Local via fxp0.0
192.168.10.0/24 *[Direct/0] 00:25:42
> via irb.10
192.168.10.1/32 *[Local/0] 00:25:42
Local via irb.10
192.168.20.0/24 *[Direct/0] 00:19:08
> via irb.20
192.168.20.1/32 *[Local/0] 00:19:08
Local via irb.20

inet6.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

ff02::2/128 *[INET6/0] 00:26:21
MultiRecv

root>

 

Hi Jaehoon,

 

Can you please try to the change the interface mode of ge-0/0/1 and ge-0/0/2 to trunk instread of access mode?

Rest configuration looks fine. If the above change does not work for your then can you please collect the traceoptions and upload here following the below steps:

 

• Log into the SRX device and enter the configuration mode.