[j-nsp] l3 vpn ping in juniper in M320
Dinesh Bhonsle
dineshbs123 at gmail.com
Wed Aug 20 15:06:55 EDT 2008
Harry,
I am using a vlan-tagged interface to connect to CE2
ge-0/0/1 {
vlan-tagging;
unit 1 {
vlan-id 1;
family inet {
address 81.1.1.1/24;
}
}
}
Also pe-pe ping for loopback address in global routing instance work.
Only thing is M320 does not reply , when pinged to 81.1.1.1 , its local
vpn interface.
Thanks for your help.
On 8/20/08, Harry Reynolds <harry at juniper.net> wrote:
>
> Are you using any VT interface or lsi? If not, I believe this is
> normal. Meaning, when the remote PE pops the label it cannot do an IP
> lookup with the vt tunnel/lsi, so its compelled to forward a packet
> addressed to its local ifl out the VRF interface. In my experience the
> CE, upon receiving such a packet, does the ttl - 1 thing and routes the
> packet back towards the PE, who now sees an IP packet (in a vrf
> context), and can generate a reply.
>
> So, while there is an extra hop, things work. Might want to very that
> pe-pe pings to core and vrf interfaces are working. Perhaps remote PE
> does not have a route back to ping source and is dropping.
>
> HTHs
>
>
>
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Dinesh Bhonsle
> Sent: Wednesday, August 20, 2008 10:56 AM
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] l3 vpn ping in juniper in M320
>
> Hi,
>
> I am not able to get a succesfull vpn ping response for directly
> connected interface inside a vpn instance in juniper.
>
> CE1-----M320-1--------L3vpn core-----M320-2(vpn instance vpn1) (81.1.1.1
> )--------------------------(81.1.1.2)CE2
>
> when i ping from CE1 to 81.1.1.1 on M320-2, i see that M320 does not
> reply , but mistreiously forwards icmp echo requests to CE2.
> When i ping from CE1 to 81.1.1.2 , i see ping responses from CE2, ping
> successful. So only ping to junipers ip-addr fails.
> Regards
> Dinesh
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
More information about the juniper-nsp
mailing list