SRX

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Event option and change of config

    Posted 12-09-2017 13:37

    HI everyone,

     

    I want SRX 100  to do this:

    If RPM for 10.10.10.1 fails, install static route 8.8.8.8/32 next hop 10.10.10.2 using EVENT -OPTION

     

    SET UP:

     

    SRX 10.10.10.6----SW-----10.10.10.1F1 R1

                                        ------10.10.10.2 F1 R2

     

     

     

     

     

    Below is my config :

     

    set services rpm probe A test PING-A-1 probe-type icmp-ping
    set services rpm probe A test PING-A-1 target address 10.10.10.1
    set services rpm probe A test PING-A-1 test-interval 3
    set services rpm probe A test PING-A-1 thresholds successive-loss 3

     

    set event-options policy A events ping_test_failed
    set event-options policy A within 100 trigger on
    set event-options policy A within 100 trigger 1
    set event-options policy A attributes-match ping_test_failed.test-owner matches A
    set event-options policy A attributes-match ping_test_failed.test-name matches PING-A-1
    set event-options policy A then execute-commands commands "set routing-option static route 8.8.8.8/32 next-hop 10.10.10.2"

     

     

    Below  I have shutdown the inerface on R1 f0/0 10.10.10.1 , as expecetd SRX shows PROBE fails:

    root> show services rpm probe-results
    Owner: A, Test: PING-A-1
    Target address: 10.10.10.1, Probe type: icmp-ping, Test size: 1 probes
    Probe results:
    No route to target, Sat Dec 9 21:33:00 2017
    Results over current test:
    Probes sent: 1, Probes received: 0, Loss percentage: 100
    Results over last test:
    Probes sent: 1, Probes received: 0, Loss percentage: 100
    Results over all tests:
    Probes sent: 1015, Probes received: 905, Loss percentage: 10
    Measurement: Round trip time
    Samples: 905, Minimum: 3988 usec, Maximum: 31554 usec,
    Average: 10959 usec, Peak to peak: 27566 usec, Stddev: 3859 usec,
    Sum: 9917737 usec

     

     

    But I do not see the command " set routing-option static route 8.8.8.8/32 next-hop 10.10.10.2" executed.

     

    root> show route protocol static

    inet.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden)

    inet6.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)

    root>

     

    1) What am I missing?

    2)  what is 100 bel;ow is it in seconds ?

    set event-options policy A within 100 

     

    Thanks and have a nice weekend!!



  • 2.  RE: Event option and change of config
    Best Answer

    Posted 12-10-2017 04:49

    I think you should have sevices ip-monitoring instead of event options:

     

    set services ip-monitoring policy PING-A-1 match rpm-probe Probe-Payment-Server
    set services ip-monitoring policy PING-A-1 then preferred-route route 8.8.8.8/32 next-hop 10.10.10.2

     

    https://www.juniper.net/documentation/en_US/junos/topics/example/ip-monitoring-security-configuring.html

     



  • 3.  RE: Event option and change of config

    Posted 12-16-2017 22:06

    Works great!!