SRX

 View Only
last person joined: 16 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Duplicates Packets

    Posted 04-22-2023 01:22


    Hi All,
    We are getting Duplicates packets while pinging from Juniper Router to Firewall SRX but without packet loss.Is anything loss with Duplicates packets in production environment. Please help on this.

    Topology like below




    On Router 1 and Router ISP1 and ISP2 are terminated.
    We getting  following ping like below...

    lab@ROUTER-1# run ping 20.20.20.1 rapid count 100    
    PING 20.20.20.1 (20.20.20.1): 56 data bytes
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    --- 20.20.20.1 ping statistics ---
    100 packets transmitted, 100 packets received, +99 duplicates, 0% packet loss
    round-trip min/avg/max/stddev = 0.855/1.657/14.127/1.431 ms



    >>>This Dulplicates are normal or need to worry about something in Production environment .Please assist on this.


    Regards,
    Rakesh



    ------------------------------
    Rakesh A
    ------------------------------


  • 2.  RE: Duplicates Packets

    Posted 04-22-2023 14:11

    Duplicates are a problem that should be corrected.

    Is 20.20.20.1 the vrrp  VIP address?  This can happen if there is a dual master situation where both devices think they need to be active for the VIP at the same time.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Duplicates Packets

    Posted 04-24-2023 06:15

    Hi Steve Puluka,
    Thanks for your replay..
    20.20.20.1 is Firewall IP address...



    ------------------------------
    Rakesh A
    ------------------------------



  • 4.  RE: Duplicates Packets

    Posted 04-24-2023 06:26

    If the ip is on only one physical interface, is there perhaps a layer 2 loop here?

    Are these links above point to point layer 3 or layer 2 configurations?

    If they are all in the same layer 2 domain you likely have setup a loop that is creating the duplicate packets.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 5.  RE: Duplicates Packets

    Posted 05-03-2023 01:03

    Hi Spuluka,

    Thank you for Helping. This is resolved.

    Thanks
    Rakesh



    ------------------------------
    Rakesh A
    ------------------------------