[j-nsp] Routing to tunnel interfaces on M10i

[Julien Goodwin]

On 19/01/11 00:42, Alexander Shikoff wrote:
> But it seems that M10i does not route anything to this tunnel:
> I cannot ping 109.68.40.158 from any other place of my network.
> 
> What's wrong with it? Thanks in advance.

So, here's a few things:

1. Are you running at least JunOS 9.2?
 - I had some issues with IPIP in 9.0 and 9.1, 9.2 and 10.0 have been fine

2. Do you have a tunnel pic?
 - Some quick googling does seem to confirm IPIP needs a tunnel pic
 - However traffic to the RE may still work without one

3. Are you advertising the routes for traffic behind the tunnel via your
IGP?
 - What does "show route" somewhere else say?
 - Does a traceroute show the expected path?

4. Does the *remote* site do the same for return traffic

5. Are you advertising a better route to the tunnel source (either way)
 - Some gear will bring a tunnel up, negotiate the IGP, then try to send
the encapsulated traffic over the tunnel itself (JunOS will do this with
both SRX and ES-pic IPSec), static /32's can help here

-- 
Julien Goodwin
Studio442
"Blue Sky Solutioneering"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20110119/aa6add34/attachment.pgp>