Re: BFD - too fast when it's back ?
Hi, With BGP BFD, the BGP session will tear down once the BFD keepalive is breached. In this configuration, the threshold is 9s. The hold-time does not really have any effect in this case as BFD timer...
View ArticleRe: SRX "Hairpining" issue
Hi,Dst/src NAT rule was re-configured as "from zone/to zone" instead "from instance", but result same. ICMP works, but TCP session cannot be established by obvious reasons. Current configuration looks...
View ArticleRe: RSVP-TE with link-protection configured LSP log
Hi, "traffic-engineering bgp-igp|-both-ribs" is not in this configuration.
View ArticleBGP Peering Keywords
Hi, I'm not getting why we have "set protocols bgp group IBGP type internal" command for iBGP peering. In the following configuration, it's not been configured on either of side. root@R1# show...
View ArticleRe: BGP Peering Keywords
Hi, I believe although the type is optional, its purpose is to sanitise the configuration.For example, with config below:routing-options { autonomous-system 65000; } protocols { bgp { group BGP {...
View ArticleRe: BFD - too fast when it's back ?
Can you explain how the BGP failover topology is setup? I'm not sure from the description exactly what the failure scenario is right now. BFD is only forcing the removal of the peer at 9 seconds and...
View ArticleRe: SRX "Hairpining" issue
I generally make the source nat portion of this rule specific to the local subnet involved as the source and use interface instead of a pool for the address. With destination of the server public nat...
View ArticleClik here to view.
Correct CoS field for MPLS
Hi, I am studying CoS at the minute and wondered if anyone could help clarify something for me. I want to put my network control traffic into an LSP which I can then traffic engineer to a high level of...
View ArticleClik here to view.
Sending default route to IBGP neighbors
I have a configuration that is setup as such. Main router in datacenter that has connectivity to AT&T MPLS network and another connection to an ISP. I have several other sites in the MPLS network...
View ArticleRe: Sending default route to IBGP neighbors
I'm not sure I completely follow the routing topology. Does the SRX iBGP peer to all the remote sites have the default route to the ISP in its route table? If so, you could likely just add an route...
View ArticleRe: Sending default route to IBGP neighbors
Neighbor relationship is only setup with the CPE at the site, although the srx's are in the same AS they are not setup as neighbors. The SRX in the datacenter has the default route to the ISP but the...
View ArticleConfig irb, bridge domain, vrrp on logical system
Hi every body, I have a problem when config irb and bridge domain on logical system.The diagram irb.0 --- Router 1 (logical-system H1) ge1/1/1 --------------- Router 2 (logical-system H2) ge1/1/1 ----...
View ArticleRe: Config irb, bridge domain, vrrp on logical system
Hi, Can you please check the state of the irb interfaces "show interfaces terse irb.*"Are you able to ping the local irb interface IP address? Cheers,Ashvin
View ArticleRe: Sending default route to IBGP neighbors
So if I understand correctly, the remote site SRX will already send all traffic via a default route to the datacenter MPLS router. Right? Or does this remote site default go somewhere else? What...
View ArticleRe: Sending default route to IBGP neighbors
So here is a map of the basic layout.Site SRX has the following static route 0.0.0.0/0 next-hop 172.16.0.110 which is to the AT&T MPLS router. Site test configsystem { host-name TX03-FW-1;...
View ArticleRe: Sending default route to IBGP neighbors
So in the ATT MPLS setup I assume this is a L3 VPN VRF for your traffic. If that is the case you should be able to inject the default route from your data center SRX to the ATT peer at the data...
View ArticleRe: Correct CoS field for MPLS
Hi, An LSR would only look at the MPLS header to label-switch the packet, thus any CoS required needs MPLS EXP bits to be set.As part of the CoS Configuration, you can configure and apply rewrite rules...
View ArticleRe: Config irb, bridge domain, vrrp on logical system
Thank you for your reply. I detected the problem is the link between two router. It works OK now.
View Article