[j-nsp] l3vpn help needed

2011-03-11 Thread Vlad Ion
Hi, I'm trying to simplify as much as possible the config I have for a L3 vpn over mpls between 2 sites but it seems that I now have some issues: I can't ping interfaces from the other site even though I see the routes so any help would be greatly appretiated. *Topology:* (ge0/0/3.110 vpn-a

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Diogo Montagner
Hi, could you please share what is your hardware on the core facing interfaces ? There are some restrictions when using vrf-table-label. http://www.juniper.net/techpubs/en_US/junos10.4/topics/usage-guidelines/vpns-filtering-packets-in-layer-3-vpns-based-on-ip-headers.html Thanks ./diogo

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Vlad Ion
Hi Diogo, All 3 devices part of the mpls domain are J2320 routers that have only Gig Eth interfaces. BR, Vlad On Fri, Mar 11, 2011 at 2:26 PM, Diogo Montagner diogo.montag...@gmail.comwrote: Hi, could you please share what is your hardware on the core facing interfaces ? There are some

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Keegan Holley
Can you post the config or at least the routing table from the other side? Are your LSP's up? On Fri, Mar 11, 2011 at 6:45 AM, Vlad Ion vlad.th...@gmail.com wrote: Hi, I'm trying to simplify as much as possible the config I have for a L3 vpn over mpls between 2 sites but it seems that I

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Phill Jolliffe
Chances are his lsp to remote PE is up as he has the following route his is pinging active in his vrf. 10.10.2.0/24 *[BGP/170] 05:27:25, localpref 100, from 10.2.0.1 AS path: I to 172.16.150.1 via ge-0/0/1.0, Push 16, Push 299808(top) If the

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Bjørn Tore
Den 11.03.2011 12:45, skrev Vlad Ion: ping routing-instance vpn-a 10.10.2.254 PING 10.10.2.254 (10.10.2.254): 56 data bytes ^C --- 10.10.2.254 ping statistics --- 6 packets transmitted, 0 packets received, 100% packet loss ___ juniper-nsp mailing list

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Keegan Holley
On Fri, Mar 11, 2011 at 10:00 AM, Phill Jolliffe ph...@saddlebacksolutions.com wrote: Chances are his lsp to remote PE is up as he has the following route his is pinging active in his vrf. I suppose but it looks like his configs work and MPLS/L3VPN pretty much does the rest automatically.

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Vlad Ion
hi Bjørn, If I ping 10.10.1.254 (local vrrp interface or 10.10.1.253 local physical interface)... I get 100% success rate. Br, Vlad On Fri, Mar 11, 2011 at 3:56 PM, Bjørn Tore b...@paulen.net wrote: Den 11.03.2011 12:45, skrev Vlad Ion: ping routing-instance vpn-a 10.10.2.254 PING

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread b...@paulen.net
Hi, I was thinking pinging the remote if with source address local if. /bt - Reply message - Fra: Vlad Ion vlad.th...@gmail.com Til: Bjørn Tore b...@paulen.net Kopi: juniper-nsp@puck.nether.net Emne: [j-nsp] l3vpn help needed Dato: fre., mars 11, 2011 19:47 hi Bjørn, If I ping

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread David Lockuan
Hi Vlad, Maybe you need to review to this link: http://puck.nether.net/pipermail/juniper-nsp/2010-October/018150.html Here we are taking the topic about the use of vrf-table-label. Best regards, David. On Fri, Mar 11, 2011 at 8:01 PM, b...@paulen.net b...@paulen.net wrote: Hi, I was

Re: [j-nsp] l3vpn help needed

2011-03-11 Thread Bjørn Tore Paulen
Den 11.03.2011 19:47, skrev Vlad Ion: hi Bjørn, If I ping 10.10.1.254 (local vrrp interface or 10.10.1.253 local physical interface)... I get 100% success rate. Br, Vlad I was thinking like ping routing-instance vpn-a 10.10.2.254 source-address 10.10.1.253 if you have