SRX

Expand all | Collapse all

troubles with second ipip interface/tunnel

Jump to Best Answer
  • 1.  troubles with second ipip interface/tunnel

    Posted 07-19-2018 09:03

    Hello,

    i have problem with second ipip tunnel ( config maybe ?).

    First tunnel is working but second no upping interface at  all.

    Any ideas ot hints ?

     

    nikolay@r1> show configuration | display set | match ip-   
    set interfaces ip-0/0/0 description Erkan
    set interfaces ip-0/0/0 unit 0 tunnel source 87.120.xxx.x
    set interfaces ip-0/0/0 unit 0 tunnel destination 109.120.xxx.x
    set interfaces ip-0/0/0 unit 0 family inet address 1.1.2.1/30
    set interfaces ip-0/0/1 description Stelena
    set interfaces ip-0/0/1 unit 0 tunnel source 87.120.yyy.y
    set interfaces ip-0/0/1 unit 0 tunnel destination 93.183.yyy.y
    set interfaces ip-0/0/1 unit 0 family inet address 1.1.1.1/30
    set routing-options static route 192.168.88.0/24 next-hop ip-0/0/1.0
    set routing-options static route 172.17.100.0/24 next-hop ip-0/0/0.0
    set security zones security-zone untrust interfaces ip-0/0/0.0
    set security zones security-zone untrust interfaces ip-0/0/1.0
    nikolay@r1> show interfaces ip-0/0/0 brief 
    Physical interface: ip-0/0/0, Enabled, Physical link is Up
      Description: Erkan
      Type: IPIP, Link-level type: IP-over-IP, MTU: Unlimited, Speed: 800mbps
      Link flags     : Scheduler Keepalives DTE
      Device flags   : Present Running
    
      Logical interface ip-0/0/0.0 
        Flags: Point-To-Point SNMP-Traps 0x0 IP-Header 109.120.xxx.x:87.120.yyy.y:4:df:64:00000000 Encapsulation: IPIP-NULL
        Security: Zone: untrust
        inet  1.1.2.1/30      
    
    nikolay@r1> show interfaces ip-0/0/1 brief    
    error: device ip-0/0/1 not found
    

     



  • 2.  RE: troubles with second ipip interface/tunnel
    Best Answer

    Posted 07-19-2018 09:18

    Hello,

    If this is SRX, then tunnel services are supported only on FPC 0 PIC 0 port 0 (0/0/0).

    You can have > 1 tunnel if You use different units:

    set interfaces ip-0/0/0 unit 0 description Erkan
    set interfaces ip-0/0/0 unit 0 tunnel source 87.120.xxx.x
    set interfaces ip-0/0/0 unit 0 tunnel destination 109.120.xxx.x
    set interfaces ip-0/0/0 unit 0 family inet address 1.1.2.1/30
    set interfaces ip-0/0/0 unit 1 description Stelena
    set interfaces ip-0/0/0 unit 1 tunnel source 87.120.yyy.y
    set interfaces ip-0/0/0 unit 1 tunnel destination 93.183.yyy.y
    set interfaces ip-0/0/0 unit 1 family inet address 1.1.1.1/30

    HTH

    Thx

    Alex