SRX

 View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  troubles with second ipip interface/tunnel

    Posted 07-19-2018 09:03

    Hello,

    i have problem with second ipip tunnel ( config maybe ?).

    First tunnel is working but second no upping interface at  all.

    Any ideas ot hints ?

     

    nikolay@r1> show configuration | display set | match ip-   
set interfaces ip-0/0/0 description Erkan
set interfaces ip-0/0/0 unit 0 tunnel source 87.120.xxx.x
set interfaces ip-0/0/0 unit 0 tunnel destination 109.120.xxx.x
set interfaces ip-0/0/0 unit 0 family inet address 1.1.2.1/30
set interfaces ip-0/0/1 description Stelena
set interfaces ip-0/0/1 unit 0 tunnel source 87.120.yyy.y
set interfaces ip-0/0/1 unit 0 tunnel destination 93.183.yyy.y
set interfaces ip-0/0/1 unit 0 family inet address 1.1.1.1/30
set routing-options static route 192.168.88.0/24 next-hop ip-0/0/1.0
set routing-options static route 172.17.100.0/24 next-hop ip-0/0/0.0
set security zones security-zone untrust interfaces ip-0/0/0.0
set security zones security-zone untrust interfaces ip-0/0/1.0
    nikolay@r1> show interfaces ip-0/0/0 brief 
Physical interface: ip-0/0/0, Enabled, Physical link is Up
  Description: Erkan
  Type: IPIP, Link-level type: IP-over-IP, MTU: Unlimited, Speed: 800mbps
  Link flags     : Scheduler Keepalives DTE
  Device flags   : Present Running

  Logical interface ip-0/0/0.0 
    Flags: Point-To-Point SNMP-Traps 0x0 IP-Header 109.120.xxx.x:87.120.yyy.y:4:df:64:00000000 Encapsulation: IPIP-NULL
    Security: Zone: untrust
    inet  1.1.2.1/30      

nikolay@r1> show interfaces ip-0/0/1 brief    
error: device ip-0/0/1 not found

     



  • 2.  RE: troubles with second ipip interface/tunnel
    Best Answer

    Posted 07-19-2018 09:18

    Hello,

    If this is SRX, then tunnel services are supported only on FPC 0 PIC 0 port 0 (0/0/0).

    You can have > 1 tunnel if You use different units:

    set interfaces ip-0/0/0 unit 0 description Erkan
set interfaces ip-0/0/0 unit 0 tunnel source 87.120.xxx.x
set interfaces ip-0/0/0 unit 0 tunnel destination 109.120.xxx.x
set interfaces ip-0/0/0 unit 0 family inet address 1.1.2.1/30
set interfaces ip-0/0/0 unit 1 description Stelena
set interfaces ip-0/0/0 unit 1 tunnel source 87.120.yyy.y
set interfaces ip-0/0/0 unit 1 tunnel destination 93.183.yyy.y
set interfaces ip-0/0/0 unit 1 family inet address 1.1.1.1/30

    HTH

    Thx

    Alex