SRX

 View Only
last person joined: 11 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX100 routing-instance

    Posted 07-17-2011 21:35

    Hi all,

    here is the configuration on SRX100. I try to do OSPF lab by creating two more routing-instaces R3 and  R4 . R2 is the master router. after applying this confi, there are many problem comes up and i did not success. Any idea, please ?

     

    set interfaces fe-0/0/1 vlan-tagging
    set interfaces fe-0/0/1 unit 20 description " link between R4 and R2"
    set interfaces fe-0/0/1 unit 20 vlan-id 20
    set interfaces fe-0/0/1 unit 20 family inet address 192.168.24.4/24

    set interfaces fe-0/0/2 vlan-tagging
    set interfaces fe-0/0/2 unit 20 description "link between R2 and R4 "
    set interfaces fe-0/0/2 unit 20 vlan-id 20
    set interfaces fe-0/0/2 unit 20 family inet address 192.168.24.2/24

    set interfaces fe-0/0/6 vlan-tagging
    set interfaces fe-0/0/6 unit 10 description "link between R2 and R3"
    set interfaces fe-0/0/6 unit 10 vlan-id 10
    set interfaces fe-0/0/6 unit 10 family inet address 192.168.23.2/24

    set interfaces fe-0/0/7 vlan-tagging
    set interfaces fe-0/0/7 unit 10 description " link between R3 and R2"
    set interfaces fe-0/0/7 unit 10 vlan-id 10
    set interfaces fe-0/0/7 unit 10 family inet address 192.168.23.3/24

    set routing-instances R2 instance-type virtual-router
    set routing-instances R2 interface fe-0/0/2.20
    set routing-instances R2 interface fe-0/0/6.10
    set routing-instances R3 instance-type virtual-router
    set routing-instances R3 interface fe-0/0/7.10
    set routing-instances R4 instance-type virtual-router
    set routing-instances R4 interface fe-0/0/1.20

    set protocols ospf area 0.0.0.0 interface lo0.0
    set protocols ospf area 0.0.0.0 interface fe-0/0/0.0 metric 100
    set protocols ospf area 0.0.0.0 interface fe-0/0/4.0

    set protocols ospf area 0.0.0.1 interface fe-0/0/7.10
    set protocols ospf area 0.0.0.1 interface fe-0/0/6.10

    set protocols ospf area 0.0.0.2 interface fe-0/0/2.20
    set protocols ospf area 0.0.0.2 interface fe-0/0/1.20


    set security forwarding-options family mpls mode packet-based

     


    #ospf
    #routing.instance


  • 2.  RE: SRX100 routing-instance

    Posted 07-17-2011 21:42

    and here are the erros come out:

     

    [edit]
    root@SRX100# commit
    [edit interfaces fe-0/0/1 unit 0 family]
      'ethernet-switching'
        An interface cannot have both family ethernet-switching and vlan-tagging configured
    [edit interfaces fe-0/0/2 unit 0 family]
      'ethernet-switching'
        An interface cannot have both family ethernet-switching and vlan-tagging configured
    [edit interfaces fe-0/0/6 unit 0 family]
      'ethernet-switching'
        An interface cannot have both family ethernet-switching and vlan-tagging configured
    [edit interfaces fe-0/0/7 unit 0 family]
      'ethernet-switching'
        An interface cannot have both family ethernet-switching and vlan-tagging configured
    [edit security]
      'policies'
        security policies not allowed when [security forwarding-options family mpls mode] is packet-based
    [edit security forwarding-options family]
      'mpls'
        MPLS mode packet-based not allowed when [security policies] are configured.
    error: commit failed: (statements constraint check failed)

    [edit]
    root@SRX100#



  • 3.  RE: SRX100 routing-instance

    Posted 07-17-2011 21:47

    and I tried to solve step by step with the erros come out :

     

    [edit]
    root@SRX100# delete interfaces fe-0/0/1 unit 0

    [edit]
    root@SRX100# delete interfaces fe-0/0/2 unit 0   

    [edit]
    root@SRX100# delete interfaces fe-0/0/6 unit 0   


    [edit]
    root@SRX100# delete interfaces fe-0/0/7 unit 0

     

    root@SRX100# deactivate security policies

     

    ...............................................................................

     

    root@SRX100# commit
    [edit protocols ospf area 0.0.0.1]
      'interface fe-0/0/7.10'
        Interface not configured in this instance
    error: configuration check-out failed




  • 4.  RE: SRX100 routing-instance

    Posted 07-17-2011 23:29

    anyone ? please !



  • 5.  RE: SRX100 routing-instance
    Best Answer

     
    Posted 07-17-2011 23:42

    root@SRX100# commit
    [edit protocols ospf area 0.0.0.1]
    'interface fe-0/0/7.10'
    Interface not configured in this instance
    error: configuration check-out failed

    This is because you've configured ospf in your inet.0 routing-instance (the default), if you apply it under the routing-instance that fe-0/0/7.10 belongs to (R3 in your case), it should work better.

    I see you will also have to move the other interfaces' ospf configuration to their respective routing-instance.



  • 6.  RE: SRX100 routing-instance

    Posted 07-18-2011 02:19

    Thanks ! that works !...hhehe



  • 7.  RE: SRX100 routing-instance

    Posted 07-18-2011 02:31

    Hi,

     

    now i have connection from R2 (which is real router that split up into two R3 and R4 routers) to R1 which is also SRX100 on fe-0/0/0.

     

    what i just done before was area 1 and area 2 and now i want to have area 0 between R2 and R1. is that possible that R1 will learn route from R3 and R4 ? and if possible how ?



  • 8.  RE: SRX100 routing-instance

     
    Posted 07-18-2011 02:42

    You should be able to use rib-groups for that and/or export policies, see this thread about the same question:
    http://forums.juniper.net/t5/Junos/How-do-I-redistribute-export-between-two-OSPF-instances/td-p/9330