Are you missing zones/policies since it is SRX? On Mon, Apr 9, 2012 at 7:05 PM, bruno <bruno.juni...@gmail.com> wrote:
> hello expert, > i use two srx210h to test some Layer 2 networking features on MX Series > routers. the topo is very simple > PC1---SRX1----SRX2----PC2. the link in srx1---srx2 is set to trunk mode. > PC1 and PC2 is belong to vlan 100. PC1 can't ping PC2. > > > interfaces { > ge-0/0/1 { > description TO-SRX2; > vlan-tagging; > unit 0 { > family bridge { > interface-mode trunk; > vlan-id-list [ 100 200 ]; > } > } > } > fe-0/0/4 { > unit 0 { > family bridge { > interface-mode access; > vlan-id 100; > } > } > } > irb { > unit 100 { > description "GW For VLAN 100"; > family inet { > address 100.1.1.254/24; > } > } > unit 200 { > description "GW For VLAN 200"; > family inet { > address 200.1.1.254/24; > } > } > } > } > security { > forwarding-options { > family { > mpls { > mode packet-based; > } > } > } > } > bridge-domains { > vlan_100 { > vlan-id 100; > routing-interface irb.100; > } > vlan_200 { > vlan-id 200; > routing-interface irb.200; > } > } > > > > ------------------ > Best Regards, > Bruno > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp