On 19/01/11 00:42, Alexander Shikoff wrote: > But it seems that M10i does not route anything to this tunnel: > I cannot ping 109.68.40.158 from any other place of my network. > > What's wrong with it? Thanks in advance.
So, here's a few things: 1. Are you running at least JunOS 9.2? - I had some issues with IPIP in 9.0 and 9.1, 9.2 and 10.0 have been fine 2. Do you have a tunnel pic? - Some quick googling does seem to confirm IPIP needs a tunnel pic - However traffic to the RE may still work without one 3. Are you advertising the routes for traffic behind the tunnel via your IGP? - What does "show route" somewhere else say? - Does a traceroute show the expected path? 4. Does the *remote* site do the same for return traffic 5. Are you advertising a better route to the tunnel source (either way) - Some gear will bring a tunnel up, negotiate the IGP, then try to send the encapsulated traffic over the tunnel itself (JunOS will do this with both SRX and ES-pic IPSec), static /32's can help here -- Julien Goodwin Studio442 "Blue Sky Solutioneering"
signature.asc
Description: OpenPGP digital signature
_______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
