Routing

 View Only
last person joined: 4 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.
Back to discussions
Expand all | Collapse all

Upon adding a new path to an ISP some websites need to be pinged to be accessed as https

  • 1.  Upon adding a new path to an ISP some websites need to be pinged to be accessed as https

    Posted 12-04-2020 06:20
    Hello,

    Upon adding a new path to the internet via a new ISP all google sites are accessible with no problems, however, if non-google sites need to be accessed a ping should be issued, otherwise the sites will be not accessed.

    Can you please help me with a hint regarding this problem?

    routing appears to be working correctly, traceroute is showing that the packets are circulating correctly within the network and are exiting without any issues.

    host that have problems are originating in a L3VPN network -> MX1 vrf instance -> switch ->srx fw -> switch -> MX1 global instance ->MX2 -> ISP 

    Thank you.


  • 2.  RE: Upon adding a new path to an ISP some websites need to be pinged to be accessed as https

     
    Posted 12-04-2020 06:48
    Hello, 

    Are you sure that the SRX FW in between is allowing the Ping in Both directions with the right src/dst addresses properly?
    " show security flow session X " would help to figure out this flow.

    Regards,
    Bemwa
    Original Message