Switching

Hello,

I got 2 QFX connected via Trunk link. One of them is connected to SRX.

Topology looks like:

QFX1(xe-0/0/10) -> (xe-0/0/0)QFX2(xe-0/0/7) -> (ge-0/0/0)SRX

When I connected PC to QFX2, ping to SRX working fine, but when I did the same with QFX1 ping/connection not working. I checked with Wireshark that packets are visible till QFX2 - visible on xe-0/0/0 but not on xe-0/0/7

Ports on QFX1:

 xe-0/0/6 {
        unit 0 {
            family ethernet-switching {
                interface-mode access;
                vlan {
                    members VLAN_Administracja;
                }
            }
        }
    }

xe-0/0/10 {
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ VLAN_Dyrekcja VLAN_Administracja VLAN_Magazyn VLAN_Pracownicy ];
                }
            }
        }
    }

Ports on QFX2

xe-0/0/0 {
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ VLAN_Dyrekcja VLAN_Administracja VLAN_Magazyn VLAN_Pracownicy ];
                }
            }
        }
    }

xe-0/0/7 {
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ VLAN_Administracja VLAN_Dyrekcja VLAN_Pracownicy VLAN_Magazyn ];
                }
            }
        }
    }

 xe-0/0/10 {
        unit 0 {
            family ethernet-switching {
                interface-mode access;
                vlan {
                    members VLAN_Administracja;
                }
            }
        }
    }

Any ideas what is wrong with my config, or how to solve the issue?

Hi Wolan1995,

 The configuration of the interfaces looks correct. Is this happening with IRBs on multiple VLANs or only one?

 Please also indicate the OS version and QFX model use.

Regards,

Esteban

Hi Esteban,

It is vQFX - version JUNOS 15.1X53-D60.4.

I emulate it with EVE-NG.

Problem occure for all VLANs - I already downloading the newest version of vQFX to check if problem will exist on it too.

Regards,

Kamil

  If no firewalls filters or duplicate IP addresses are detected, then it is possible that there was either a software issue during the installation or that the kernel did not properly installed the MAC and ARP for the respective peers. If that is the case, the reinstallation typically fixes the issue.

 Kindly share the status after using the newest code.

Regards!

Esteban

I am going to guess the IPs you are using to Ping on QFX1 and on QFX2 are NOT in the same subnet.  By default because of direct connections, QFX1 knows how to talk to QFX2, QFX2 knows how to talk to SRX, but SRX and QFX2 do not know where to go to get between each other.  A static route on QFX1 pointing to SRX with next hop of QFX2, and a similar static route on SRX pointing to QFX1 with next hop of QFX2, would solve this.

By doing this with a static default route 0.0.0.0/0 you are basically configuring a Def GW on both QFX1 and SRX.

If everything is in the same subnet/vlan, then I would suspect the SRX may have a policy that blocks traffic from QFX1.

Good luck.

I installed JUNOS 17.4R1.16 and same config working perfecly fine so the problem was with old version of QFX (or with emulation in EVE-NG).

Anyway, thanks guys!