[j-nsp] reth physical link not enabled

roland DROUAL roland.droual at paris.iufm.fr
Mon Jun 11 05:49:50 EDT 2012


Hello the List,

I have a problem with an redundant interface reth2.
I think the configuration is right, but I can't ping the @ IP
The physical link is up, but the redundant interface is not enabled.
How can I do, to have the reth2 physical link enabled ?

Thanks for your help.

Roland DROUAL

============================
toto at AS-SRX650-01# show interfaces
ge-6/0/21 {
     gigether-options {
         redundant-parent reth2;
     }
}
ge-15/0/21 {
     gigether-options {
         redundant-parent reth2;
     }
}
...
reth2 {
     description "802.1Q vers DMZ1";
     vlan-tagging;
     redundant-ether-options {
         redundancy-group 1;
     }
     unit 10 {
         vlan-id 10;
         family inet {
             address 193.48.41.193/29;
         }
     }
}

==============================
toto at AS-SRX650-01# run show interfaces
Physical interface: ge-6/0/21, Enabled, Physical link is Up
   Interface index: 157, SNMP ifIndex: 299
   Link-level type: Ethernet, MTU: 1518, Link-mode: Full-duplex, Speed: 
1000mbps, BPDU Error: None, MAC-REWRITE Error: None,
   Loopback: Disabled, Source filtering: Disabled, Flow control: 
Enabled, Auto-negotiation: Enabled, Remote fault: Online
   Device flags   : Present Running
   Interface flags: SNMP-Traps Internal: 0x0
   CoS queues     : 8 supported, 8 maximum usable queues
   Current address: 00:26:88:e2:a5:bd, Hardware address: 00:26:88:e2:a5:bd
   Last flapped   : 2012-06-08 01:35:48 UTC (1d 16:47 ago)
   Input rate     : 0 bps (0 pps)
   Output rate    : 0 bps (0 pps)
   Active alarms  : None
   Active defects : None
   Interface transmit statistics: Disabled

   Logical interface ge-6/0/21.10 (Index 98) (SNMP ifIndex 597)
     Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x8100.10 ]  Encapsulation: ENET2
     Input packets : 0
     Output packets: 0
     Security: Zone: Null
     Protocol aenet, AE bundle: reth2.10   Link Index: 0

   Logical interface ge-6/0/21.32767 (Index 97) (SNMP ifIndex 578)
     Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x0000.0 ]  Encapsulation: ENET2
     Input packets : 0
     Output packets: 0
     Security: Zone: Null
     Protocol aenet, AE bundle: reth2.32767   Link Index: 0


But I can't see the interface reth2. I should see:
- "Physical interface: reth2, Enabled, Physical link is Up ...."
- "  Logical interface reth2.10 ...."
and I don't see them. the physical interface reth2 seems to be not enabled.

=================================
And so, there is no route for the range IP 193.48.41.192/29, via reth2.10

toto at AS-SRX650-01# run show route

inet.0: 11 destinations, 11 routes (10 active, 0 holddown, 1 hidden)
+ = Active Route, - = Last Active, * = Both

10.1.3.0/29        *[Direct/0] 1d 18:58:31
 > via reth0.201
10.1.3.1/32        *[Local/0] 1d 18:58:31
                       Local via reth0.201
10.1.4.0/29        *[Direct/0] 1w3d 20:07:04
 > via reth1.100
10.1.4.2/32        *[Local/0] 1w3d 20:07:04
                       Local via reth1.100
10.96.0.0/11       *[Static/5] 1w1d 16:00:44
 > to 10.1.4.1 via reth1.100
10.115.0.0/16      *[Direct/0] 1w3d 21:08:07
 > via fxp0.0
10.115.7.11/32     *[Local/0] 1w3d 21:08:07
                       Local via fxp0.0
10.192.0.0/11      *[Static/5] 1d 18:58:31
 > to 10.1.3.2 via reth0.201
195.221.125.204/30 *[Direct/0] 1d 19:22:26
 > via reth0.955
195.221.125.206/32 *[Local/0] 1d 19:56:26
                       Local via reth0.955
================================
The interface reth2 is in a security zone:

         security-zone DMZ {
             host-inbound-traffic {
                 system-services {
                     all;
                 }
                 protocols {
                     all;
                 }
             }
             interfaces {
                 reth2.10;
             }
         }
     }
}





More information about the juniper-nsp mailing list