[j-nsp] reth physical link not enabled

roland DROUAL roland.droual at paris.iufm.fr
Mon Jun 11 08:04:40 EDT 2012


I want to add:

The interface reth2 is connected to an interface ge-0/0/21 on a switch 
EX4200.
The interface is in trunk mode. (it's the same if the interface is in 
access mode).
This interface ge-0/0/21 is UP.

Thanks for your help

Roland DROUAL


titi at AS-EX4200-01# show interfaces ge-0/0/21
unit 0 {
     family ethernet-switching {
         port-mode trunk;
         vlan {
             members v010-DMZ;
         }
     }
}

titi at AS-EX4200-01# run show interfaces ge-0/0/21
Physical interface: ge-0/0/21, Enabled, Physical link is Up
   Interface index: 132, SNMP ifIndex: 546
   Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, Duplex: 
Full-Duplex, BPDU Error: None,
   MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: 
Disabled, Flow control: Enabled,
   Auto-negotiation: Enabled, Remote fault: Online
   Device flags   : Present Running
   Interface flags: SNMP-Traps Internal: 0x0
   Link flags     : None
   CoS queues     : 8 supported, 8 maximum usable queues
   Current address: 50:c5:8d:b6:e3:98, Hardware address: 50:c5:8d:b6:e3:98
   Last flapped   : 2012-04-08 17:53:45 CEST (3d 19:27 ago)
   Input rate     : 0 bps (0 pps)
   Output rate    : 504 bps (0 pps)
   Active alarms  : None
   Active defects : None
   Interface transmit statistics: Disabled

   Logical interface ge-0/0/21.0 (Index 94) (SNMP ifIndex 547)
     Flags: SNMP-Traps 0x0 Encapsulation: ENET2
     Input packets : 12
     Output packets: 491194
     Protocol eth-switch
       Flags: Trunk-Mode
titi at AS-4200-01# show vlans v010-DMZ
vlan-id 10;


titi at AS-EX4200-01# run show vlans v010-DMZ
Name           Tag     Interfaces
v010-DMZ       10
                        ge-0/0/9.0*, ge-0/0/11.0, ge-0/0/12.0, 
ge-0/0/13.0, ge-0/0/15.0*, ge-0/0/21.0*,
                        ge-0/0/22.0*

Le 11/06/2012 11:49, roland DROUAL a écrit :
> Hello the List,
>
> I have a problem with an redundant interface reth2.
> I think the configuration is right, but I can't ping the @ IP
> The physical link is up, but the redundant interface is not enabled.
> How can I do, to have the reth2 physical link enabled ?
>
> Thanks for your help.
>
> Roland DROUAL
>
> ============================
> toto at AS-SRX650-01# show interfaces
> ge-6/0/21 {
>     gigether-options {
>         redundant-parent reth2;
>     }
> }
> ge-15/0/21 {
>     gigether-options {
>         redundant-parent reth2;
>     }
> }
> ...
> reth2 {
>     description "802.1Q vers DMZ1";
>     vlan-tagging;
>     redundant-ether-options {
>         redundancy-group 1;
>     }
>     unit 10 {
>         vlan-id 10;
>         family inet {
>             address 193.48.41.193/29;
>         }
>     }
> }
>
> ==============================
> toto at AS-SRX650-01# run show interfaces
> Physical interface: ge-6/0/21, Enabled, Physical link is Up
>   Interface index: 157, SNMP ifIndex: 299
>   Link-level type: Ethernet, MTU: 1518, Link-mode: Full-duplex, Speed: 
> 1000mbps, BPDU Error: None, MAC-REWRITE Error: None,
>   Loopback: Disabled, Source filtering: Disabled, Flow control: 
> Enabled, Auto-negotiation: Enabled, Remote fault: Online
>   Device flags   : Present Running
>   Interface flags: SNMP-Traps Internal: 0x0
>   CoS queues     : 8 supported, 8 maximum usable queues
>   Current address: 00:26:88:e2:a5:bd, Hardware address: 00:26:88:e2:a5:bd
>   Last flapped   : 2012-06-08 01:35:48 UTC (1d 16:47 ago)
>   Input rate     : 0 bps (0 pps)
>   Output rate    : 0 bps (0 pps)
>   Active alarms  : None
>   Active defects : None
>   Interface transmit statistics: Disabled
>
>   Logical interface ge-6/0/21.10 (Index 98) (SNMP ifIndex 597)
>     Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x8100.10 ]  Encapsulation: ENET2
>     Input packets : 0
>     Output packets: 0
>     Security: Zone: Null
>     Protocol aenet, AE bundle: reth2.10   Link Index: 0
>
>   Logical interface ge-6/0/21.32767 (Index 97) (SNMP ifIndex 578)
>     Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x0000.0 ]  Encapsulation: ENET2
>     Input packets : 0
>     Output packets: 0
>     Security: Zone: Null
>     Protocol aenet, AE bundle: reth2.32767   Link Index: 0
>
>
> But I can't see the interface reth2. I should see:
> - "Physical interface: reth2, Enabled, Physical link is Up ...."
> - "  Logical interface reth2.10 ...."
> and I don't see them. the physical interface reth2 seems to be not 
> enabled.
>
> =================================
> And so, there is no route for the range IP 193.48.41.192/29, via reth2.10
>
> toto at AS-SRX650-01# run show route
>
> inet.0: 11 destinations, 11 routes (10 active, 0 holddown, 1 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 10.1.3.0/29        *[Direct/0] 1d 18:58:31
> > via reth0.201
> 10.1.3.1/32        *[Local/0] 1d 18:58:31
>                       Local via reth0.201
> 10.1.4.0/29        *[Direct/0] 1w3d 20:07:04
> > via reth1.100
> 10.1.4.2/32        *[Local/0] 1w3d 20:07:04
>                       Local via reth1.100
> 10.96.0.0/11       *[Static/5] 1w1d 16:00:44
> > to 10.1.4.1 via reth1.100
> 10.115.0.0/16      *[Direct/0] 1w3d 21:08:07
> > via fxp0.0
> 10.115.7.11/32     *[Local/0] 1w3d 21:08:07
>                       Local via fxp0.0
> 10.192.0.0/11      *[Static/5] 1d 18:58:31
> > to 10.1.3.2 via reth0.201
> 195.221.125.204/30 *[Direct/0] 1d 19:22:26
> > via reth0.955
> 195.221.125.206/32 *[Local/0] 1d 19:56:26
>                       Local via reth0.955
> ================================
> The interface reth2 is in a security zone:
>
>         security-zone DMZ {
>             host-inbound-traffic {
>                 system-services {
>                     all;
>                 }
>                 protocols {
>                     all;
>                 }
>             }
>             interfaces {
>                 reth2.10;
>             }
>         }
>     }
> }
>
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>



More information about the juniper-nsp mailing list