[j-nsp] l3vpn help needed

[Vlad Ion]

Ok everyone... thanks to Doug the l3mpls-vpn problem is solved.. the issue
wasn't on the VPN configuration side but rather on the security policy
side.. and simply by removing the security policy and setting mpls mode
packet-based as the only security policy it is all fixed now.

“delete security” and “set security forwarding-options family mpls mode
packet-based”

thanks a lot everyone for all the help !

On Sun, Mar 13, 2011 at 4:14 AM, Doug Hanks <dhanks at juniper.net> wrote:

> Can we at least see the "show config | no-more" and "show route prefix/mask
> extensive | no-more" outputs on each of the routers?
>
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net [mailto:
> juniper-nsp-bounces at puck.nether.net] On Behalf Of Vlad Ion
> Sent: Saturday, March 12, 2011 1:22 AM
> To: bt at paulen.net
> Cc: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] l3vpn help needed
>
> > ping routing-instance vpn-a 10.10.2.254 source 10.10.1.253
> PING 10.10.2.254 (10.10.2.254): 56 data bytes
> ^C
> --- 10.10.2.254 ping statistics ---
> 4 packets transmitted, 0 packets received, 100% packet loss
>
> I'm missing something but I just have no idea what... and I'm quite sure it
> is one of those small things you just can't see anymore after staring too
> long at it
>
> On Sat, Mar 12, 2011 at 3:01 AM, bt at paulen.net <bt at paulen.net> wrote:
>
> > Hi,
> >
> > I was thinking pinging the remote if with source address local if.
> >
> > /bt
> >
> > ----- Reply message -----
> > Fra: "Vlad Ion" <vlad.thoth at gmail.com>
> > Til: "Bjørn Tore" <bt at paulen.net>
> > Kopi: <juniper-nsp at puck.nether.net>
> > Emne: [j-nsp] l3vpn help needed
> > Dato: fre., mars 11, 2011 19:47
> >
> >
> > hi Bjørn,
> >
> > If I ping 10.10.1.254 (local vrrp interface or 10.10.1.253 local physical
> > interface)... I get 100% success rate.
> >
> > Br,
> > Vlad
> >
> > On Fri, Mar 11, 2011 at 3:56 PM, Bjørn Tore <bt at paulen.net> wrote:
> >
> >> Den 11.03.2011 12:45, skrev Vlad Ion:
> >>
> >>> ping routing-instance vpn-a 10.10.2.254
> >>>
> >>> PING 10.10.2.254 (10.10.2.254): 56 data bytes
> >>> ^C
> >>> --- 10.10.2.254 ping statistics ---
> >>> 6 packets transmitted, 0 packets received, 100% packet loss
> >>> _______________________________________________
> >>> juniper-nsp mailing list juniper-nsp at puck.nether.net
> >>> https://puck.nether.net/mailman/listinfo/juniper-nsp
> >>>
> >> What happens if you specify your local interface-address as source
> >> address?
> >>
> >>
> >> --
> >> Bjørn Tore Paulen
> >> Holsjordet 45
> >> Tlf 95981603
> >>
> >>
> >> _______________________________________________
> >>
> >> juniper-nsp mailing list juniper-nsp at puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/juniper-nsp
> >>
> >
> >
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>