Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
We are looking to run multiple public IPs from two ISPs into our building with an MX204. These will be 100G connections. Each IP will go to its own gateway. We will also need to setup a DHCP relay to our current router running our 10G office network. We have some networking experience, but are new to this level of networking. I am hoping for some assistance or direction.
On the MX series you would be using carrier grade nat for the distribution. There is a free Juniper Day one book with example configurations for that process here.https://www.juniper.net/documentation/en_US/day-one-books/DO_CGNAT_UpRunning.zip
DHCP forwarding configurations are in this documentation.
Thanks for the help on this. We have everything working, but now we are looking to add in a second ISP with a different IP range and size. We have our default next hop setup with the original ISP. We are using 1 service set for all our rules with dnat-44 and basic-nat44 translation for our 1:1 internal to external IPs. The new ISP IPs will be setup in the same way as the first. Will this require redoing what is already done? Doing some research, I am reading a lot about setting up ribs and modifying routing tables.
This is the the same MX204.
et-0/0/0 - ISP1
et-0/0/1 - ISP2
et-0/0/2 - Spine distribution port 1
et-0/0/3 - spine distribution port 2
Thanks for the assistance.
By default the MX would reply to these requests so I suspect there is a protection firewall filter applied. Which is a good idea for internet active devices.
You will need to locate the filter and expand the allow ping and traceroute terms or add them to get the responses you are looking for from the device.
Typically the filter would be applied to the loopback address to filter traffic destined for the routing engine on the MX.
Filter examples can be seen here in the documentation.
A longer Day one book with examples is on the Juniper day one book site.