[j-nsp] RPM udp-ping probe test timing out

[Ihsan Junaidi Ibrahim]

Hi all,

I've configured Juniper RPM with probe type udp-ping-timestamp but
having zero luck obtaining results. The probes kept timing out. The
target host's packet filter has been explicitly configured to return
reject message to the probe destination port. Counter check on the term
tallies with the packet counts.

The probing host filter has been configured to accept all types of
inbound ICMP packets. 

I've even disabled both routers firewall filters just to eliminate the
issue but still no go. No DSCP marking is associated with the probe
packets.

However when RPM is configured with icmp-ping-timestamp probe type, the
tests are successful.

Both routers are an M320 with Junos 8.5 r1.13. Their sp-* interfaces are
configured with an IP address and rpm client parameter. The target host
IP address refers to its loopback address.

Here's source router RPM test configuration:

ihsan at glsfb01-mse# show 
test pjyab01-mse_udp_ping {
    probe-type udp-ping-timestamp;
    target address 10.200.201.2;
    probe-count 3;
    probe-interval 10;
    test-interval 60;
    destination-port 50000;
    data-size 512;
    destination-interface sp-5/0/0.0;
}

ihsan at glsfb01-mse> show configuration interfaces sp-5/0/0 
unit 0 {
    rpm client;
    family inet {
        address 10.200.225.138/32;
    }
}

and the test result:

ihsan at glsfb01-mse> show services rpm probe-results owner udp-test test
pjyab01-mse_udp_ping 
    Owner: udp-test, Test: pjyab01-mse_udp_ping
    Target address: 10.200.201.2, Probe type: udp-ping-timestamp
    Destination interface name: sp-5/0/0.0
    Test size: 3 probes
    Probe results:
      Request timed out, Sat Jan  5 20:32:31 2008
    Results over current test:
      Probes sent: 3, Probes received: 0, Loss percentage: 100
    Results over last test:
      Probes sent: 3, Probes received: 0, Loss percentage: 100
    Results over all tests:
      Probes sent: 27, Probes received: 0, Loss percentage: 100

The target host firewall filter :

ihsan at pjyab01-mse> show configuration firewall filter Protect-RE term
permit_rpm     
from {
    protocol udp;
    destination-port 50000;
}
then {
    count count_rpm;
    reject;
}