[j-nsp] RPM udp-ping probe test timing out

[Harry Reynolds]

Hello,

I think that you need to configure a udp rpm server process in the
remote machine. I do not think that rpm expects to receive an icmp error
message in response to a udp test probe. No config is needed for icmp
test probes in the server, but tcp and udp probes need something like:

services {          
    rpm {
        probe-server {
            udp {
                port 50000;
            }
        }
    }
}

HTHs



> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net 
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of 
> Ihsan Junaidi Ibrahim
> Sent: Saturday, January 05, 2008 4:37 AM
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] RPM udp-ping probe test timing out
> 
> Hi all,
> 
> I've configured Juniper RPM with probe type 
> udp-ping-timestamp but having zero luck obtaining results. 
> The probes kept timing out. The target host's packet filter 
> has been explicitly configured to return reject message to 
> the probe destination port. Counter check on the term tallies 
> with the packet counts.
> 
> The probing host filter has been configured to accept all 
> types of inbound ICMP packets. 
> 
> I've even disabled both routers firewall filters just to 
> eliminate the issue but still no go. No DSCP marking is 
> associated with the probe packets.
> 
> However when RPM is configured with icmp-ping-timestamp probe 
> type, the tests are successful.
> 
> Both routers are an M320 with Junos 8.5 r1.13. Their sp-* 
> interfaces are configured with an IP address and rpm client 
> parameter. The target host IP address refers to its loopback address.
> 
> Here's source router RPM test configuration:
> 
> ihsan at glsfb01-mse# show
> test pjyab01-mse_udp_ping {
>     probe-type udp-ping-timestamp;
>     target address 10.200.201.2;
>     probe-count 3;
>     probe-interval 10;
>     test-interval 60;
>     destination-port 50000;
>     data-size 512;
>     destination-interface sp-5/0/0.0;
> }
> 
> ihsan at glsfb01-mse> show configuration interfaces sp-5/0/0 unit 0 {
>     rpm client;
>     family inet {
>         address 10.200.225.138/32;
>     }
> }
> 
> and the test result:
> 
> ihsan at glsfb01-mse> show services rpm probe-results owner 
> udp-test test pjyab01-mse_udp_ping 
>     Owner: udp-test, Test: pjyab01-mse_udp_ping
>     Target address: 10.200.201.2, Probe type: udp-ping-timestamp
>     Destination interface name: sp-5/0/0.0
>     Test size: 3 probes
>     Probe results:
>       Request timed out, Sat Jan  5 20:32:31 2008
>     Results over current test:
>       Probes sent: 3, Probes received: 0, Loss percentage: 100
>     Results over last test:
>       Probes sent: 3, Probes received: 0, Loss percentage: 100
>     Results over all tests:
>       Probes sent: 27, Probes received: 0, Loss percentage: 100
> 
> The target host firewall filter :
> 
> ihsan at pjyab01-mse> show configuration firewall filter Protect-RE term
> permit_rpm     
> from {
>     protocol udp;
>     destination-port 50000;
> }
> then {
>     count count_rpm;
>     reject;
> }
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>