[j-nsp] reth physical link not enabled

Clay Haynes chaynes at centracomm.net
Mon Jun 11 08:08:18 EDT 2012


On 6/11/12 5:49 AM, "roland DROUAL" <roland.droual at paris.iufm.fr> wrote:

>Hello the List,
>
>I have a problem with an redundant interface reth2.
>I think the configuration is right, but I can't ping the @ IP
>The physical link is up, but the redundant interface is not enabled.
>How can I do, to have the reth2 physical link enabled ?
>
>Thanks for your help.
>
>Roland DROUAL
>
>============================
>toto at AS-SRX650-01# show interfaces
>ge-6/0/21 {
>     gigether-options {
>         redundant-parent reth2;
>     }
>}
>ge-15/0/21 {
>     gigether-options {
>         redundant-parent reth2;
>     }
>}
>...
>reth2 {
>     description "802.1Q vers DMZ1";
>     vlan-tagging;
>     redundant-ether-options {
>         redundancy-group 1;
>     }
>     unit 10 {
>         vlan-id 10;
>         family inet {
>             address 193.48.41.193/29;
>         }
>     }
>}
>
>==============================
>toto at AS-SRX650-01# run show interfaces
>Physical interface: ge-6/0/21, Enabled, Physical link is Up
>   Interface index: 157, SNMP ifIndex: 299
>   Link-level type: Ethernet, MTU: 1518, Link-mode: Full-duplex, Speed:
>1000mbps, BPDU Error: None, MAC-REWRITE Error: None,
>   Loopback: Disabled, Source filtering: Disabled, Flow control:
>Enabled, Auto-negotiation: Enabled, Remote fault: Online
>   Device flags   : Present Running
>   Interface flags: SNMP-Traps Internal: 0x0
>   CoS queues     : 8 supported, 8 maximum usable queues
>   Current address: 00:26:88:e2:a5:bd, Hardware address: 00:26:88:e2:a5:bd
>   Last flapped   : 2012-06-08 01:35:48 UTC (1d 16:47 ago)
>   Input rate     : 0 bps (0 pps)
>   Output rate    : 0 bps (0 pps)
>   Active alarms  : None
>   Active defects : None
>   Interface transmit statistics: Disabled
>
>   Logical interface ge-6/0/21.10 (Index 98) (SNMP ifIndex 597)
>     Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x8100.10 ]  Encapsulation: ENET2
>     Input packets : 0
>     Output packets: 0
>     Security: Zone: Null
>     Protocol aenet, AE bundle: reth2.10   Link Index: 0
>
>   Logical interface ge-6/0/21.32767 (Index 97) (SNMP ifIndex 578)
>     Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x0000.0 ]  Encapsulation: ENET2
>     Input packets : 0
>     Output packets: 0
>     Security: Zone: Null
>     Protocol aenet, AE bundle: reth2.32767   Link Index: 0
>
>
>But I can't see the interface reth2. I should see:
>- "Physical interface: reth2, Enabled, Physical link is Up ...."
>- "  Logical interface reth2.10 ...."
>and I don't see them. the physical interface reth2 seems to be not
>enabled.
>
>=================================
>And so, there is no route for the range IP 193.48.41.192/29, via reth2.10
>
>toto at AS-SRX650-01# run show route
>
>inet.0: 11 destinations, 11 routes (10 active, 0 holddown, 1 hidden)
>+ = Active Route, - = Last Active, * = Both
>
>10.1.3.0/29        *[Direct/0] 1d 18:58:31
> > via reth0.201
>10.1.3.1/32        *[Local/0] 1d 18:58:31
>                       Local via reth0.201
>10.1.4.0/29        *[Direct/0] 1w3d 20:07:04
> > via reth1.100
>10.1.4.2/32        *[Local/0] 1w3d 20:07:04
>                       Local via reth1.100
>10.96.0.0/11       *[Static/5] 1w1d 16:00:44
> > to 10.1.4.1 via reth1.100
>10.115.0.0/16      *[Direct/0] 1w3d 21:08:07
> > via fxp0.0
>10.115.7.11/32     *[Local/0] 1w3d 21:08:07
>                       Local via fxp0.0
>10.192.0.0/11      *[Static/5] 1d 18:58:31
> > to 10.1.3.2 via reth0.201
>195.221.125.204/30 *[Direct/0] 1d 19:22:26
> > via reth0.955
>195.221.125.206/32 *[Local/0] 1d 19:56:26
>                       Local via reth0.955
>================================
>The interface reth2 is in a security zone:
>
>         security-zone DMZ {
>             host-inbound-traffic {
>                 system-services {
>                     all;
>                 }
>                 protocols {
>                     all;
>                 }
>             }
>             interfaces {
>                 reth2.10;
>             }
>         }
>     }
>}
>
>
>
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/juniper-nsp



Can you run a "show configuration chassis"? I'm guessing your reth-count
is set too low (should be reth-count 3).




- Clay




More information about the juniper-nsp mailing list