On 6/11/12 5:49 AM, "roland DROUAL" <roland.dro...@paris.iufm.fr> wrote:
>Hello the List, > >I have a problem with an redundant interface reth2. >I think the configuration is right, but I can't ping the @ IP >The physical link is up, but the redundant interface is not enabled. >How can I do, to have the reth2 physical link enabled ? > >Thanks for your help. > >Roland DROUAL > >============================ >toto@AS-SRX650-01# show interfaces >ge-6/0/21 { > gigether-options { > redundant-parent reth2; > } >} >ge-15/0/21 { > gigether-options { > redundant-parent reth2; > } >} >... >reth2 { > description "802.1Q vers DMZ1"; > vlan-tagging; > redundant-ether-options { > redundancy-group 1; > } > unit 10 { > vlan-id 10; > family inet { > address 193.48.41.193/29; > } > } >} > >============================== >toto@AS-SRX650-01# run show interfaces >Physical interface: ge-6/0/21, Enabled, Physical link is Up > Interface index: 157, SNMP ifIndex: 299 > Link-level type: Ethernet, MTU: 1518, Link-mode: Full-duplex, Speed: >1000mbps, BPDU Error: None, MAC-REWRITE Error: None, > Loopback: Disabled, Source filtering: Disabled, Flow control: >Enabled, Auto-negotiation: Enabled, Remote fault: Online > Device flags : Present Running > Interface flags: SNMP-Traps Internal: 0x0 > CoS queues : 8 supported, 8 maximum usable queues > Current address: 00:26:88:e2:a5:bd, Hardware address: 00:26:88:e2:a5:bd > Last flapped : 2012-06-08 01:35:48 UTC (1d 16:47 ago) > Input rate : 0 bps (0 pps) > Output rate : 0 bps (0 pps) > Active alarms : None > Active defects : None > Interface transmit statistics: Disabled > > Logical interface ge-6/0/21.10 (Index 98) (SNMP ifIndex 597) > Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x8100.10 ] Encapsulation: ENET2 > Input packets : 0 > Output packets: 0 > Security: Zone: Null > Protocol aenet, AE bundle: reth2.10 Link Index: 0 > > Logical interface ge-6/0/21.32767 (Index 97) (SNMP ifIndex 578) > Flags: SNMP-Traps 0x0 VLAN-Tag [ 0x0000.0 ] Encapsulation: ENET2 > Input packets : 0 > Output packets: 0 > Security: Zone: Null > Protocol aenet, AE bundle: reth2.32767 Link Index: 0 > > >But I can't see the interface reth2. I should see: >- "Physical interface: reth2, Enabled, Physical link is Up ...." >- " Logical interface reth2.10 ...." >and I don't see them. the physical interface reth2 seems to be not >enabled. > >================================= >And so, there is no route for the range IP 193.48.41.192/29, via reth2.10 > >toto@AS-SRX650-01# run show route > >inet.0: 11 destinations, 11 routes (10 active, 0 holddown, 1 hidden) >+ = Active Route, - = Last Active, * = Both > >10.1.3.0/29 *[Direct/0] 1d 18:58:31 > > via reth0.201 >10.1.3.1/32 *[Local/0] 1d 18:58:31 > Local via reth0.201 >10.1.4.0/29 *[Direct/0] 1w3d 20:07:04 > > via reth1.100 >10.1.4.2/32 *[Local/0] 1w3d 20:07:04 > Local via reth1.100 >10.96.0.0/11 *[Static/5] 1w1d 16:00:44 > > to 10.1.4.1 via reth1.100 >10.115.0.0/16 *[Direct/0] 1w3d 21:08:07 > > via fxp0.0 >10.115.7.11/32 *[Local/0] 1w3d 21:08:07 > Local via fxp0.0 >10.192.0.0/11 *[Static/5] 1d 18:58:31 > > to 10.1.3.2 via reth0.201 >195.221.125.204/30 *[Direct/0] 1d 19:22:26 > > via reth0.955 >195.221.125.206/32 *[Local/0] 1d 19:56:26 > Local via reth0.955 >================================ >The interface reth2 is in a security zone: > > security-zone DMZ { > host-inbound-traffic { > system-services { > all; > } > protocols { > all; > } > } > interfaces { > reth2.10; > } > } > } >} > > > >_______________________________________________ >juniper-nsp mailing list juniper-nsp@puck.nether.net >https://puck.nether.net/mailman/listinfo/juniper-nsp Can you run a "show configuration chassis"? I'm guessing your reth-count is set too low (should be reth-count 3). - Clay _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp