SRX

 View Only
last person joined: 19 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Simple Ping Test

    Posted 10-07-2021 09:31
    Hi Guys,

    Got a really simple configuration of two local interfaces ge-0/0/1 and ge-0/0/2. I am trying to get the two interfaces to ping eachother. What am i missing?

    set version 20.2R3.9
    set system host-name test
    set system root-authentication encrypted-password "$6$5Ha2BMVX$EfAUJQR9lis0M3xqN95dqLQ4tR6k8eklxb.1zSMf6MK7JAy.HQ07zQpnrIwB5BVQyoRgzrIpIxlrL.mpK8ODS0"
    set system services ssh root-login allow
    set system services telnet
    set system time-zone Europe/London
    set system name-server 8.8.8.8
    set system name-server 8.8.4.4
    set system max-configurations-on-flash 5
    set security policies from-zone lan to-zone guest policy lan2guest match source-address any
    set security policies from-zone lan to-zone guest policy lan2guest match destination-address any
    set security policies from-zone lan to-zone guest policy lan2guest match application any
    set security policies from-zone lan to-zone guest policy lan2guest then permit
    set security policies from-zone lan to-zone junos-host policy mgmt match source-address any
    set security policies from-zone lan to-zone junos-host policy mgmt match destination-address any
    set security policies from-zone lan to-zone junos-host policy mgmt match application junos-ssh
    set security policies from-zone lan to-zone junos-host policy mgmt match application junos-http
    set security policies from-zone lan to-zone junos-host policy mgmt match application junos-https
    set security policies from-zone lan to-zone junos-host policy mgmt match application junos-telnet
    set security policies from-zone lan to-zone junos-host policy mgmt match application junos-ping
    set security policies from-zone lan to-zone junos-host policy mgmt then permit
    set security zones security-zone lan host-inbound-traffic system-services ssh
    set security zones security-zone lan host-inbound-traffic system-services ping
    set security zones security-zone lan interfaces ge-0/0/1.0 host-inbound-traffic system-services ping
    set security zones security-zone guest interfaces ge-0/0/2.0 host-inbound-traffic system-services ping
    set interfaces ge-0/0/1 unit 0 family inet address 192.168.1.1/24
    set interfaces ge-0/0/2 unit 0 family inet address 192.168.2.1/24

    When running the command ping 192.168.2.1 source 192.168.1.1 i receive the following error:

    PING 192.168.2.1 (192.168.2.1): 56 data bytes
    ping: sendto: Can't assign requested address

    I would expect this to work because they are two local interfaces?

    Kind Regards,
    Ryan

    ------------------------------
    Ryan Todd
    ------------------------------