SRX

Head scratcher.  

I copied the config over from 320 to 340 and expected everything to just work.. :( IPv4  to devices on same subnet no longer can talk to each other.

IPv6 still works  as I can inter communicate with things on same vlan no problem. :) but it was never setup to have secondary networks .

vlan 10  irb.0  with 2 ipv4 networks

10.10.10.1/27 primary / preferred

10.10.10.49/27  (its not start or end of the subnet but it does not have to be)

Host IP 10.10.10.3 can hit anything in the 10.10.10.32/27 network no issues and vice versa. Hosts can access Internet just fine via IPv4 and IPv6.

However 10.10.10.0/27 to anything other that SRX gw nothing, and  hosts in 10.10.10.32/27 same  :/

I never get an arp back from hosts and when I static set arp with correct info still nothing.. Its like all traffic gets silently dropped by SRX .  

Makes me think I am hitting a bug ..  was srx320 was running 21.4R3-S4 .   340 running 22.4R2-S2.6  Had tried to 21.4R3-S5 but had funky other issues.

Just asking if anyone can suggest  best version of Junos they run on theirs .. Jtac recommended is  21.4R3-S4

Having a lot of odd issues with jdhcp too, but working on moving that over to a Kea server.

If you read this .. Thanks for your time.

Hi Anon,

It sounds like the l2-learning mode has not been activate yet.
Since you loaded the configuration have you performed a reboot?

Explaining, using irb interfaces on the SRX with multiple interfaces belonging to the same VLAN requires L2 Learning to be enabled. This is not by default. 

This would have been part of your migrated configuration but it does require a reboot to be enabled. You typically will receive a notice during commit.

To check which mode is enabled (look for Global Mode):

show ethernet-switching global-information

Global Configuration:MAC aging interval    : 300MAC learning          : EnabledMAC statistics        : DisabledMAC limit Count       : 16383MAC limit hit         : DisabledMAC packet action drop: DisabledMAC+IP aging interval : IPv4 - 1200 seconds                        IPv6 - 1200 secondsMAC+IP limit Count    : 393215MAC+IP limit reached  : NoLE  aging time        : 1200LE  VLAN aging time   : 1200Global Mode           : SwitchingRE state              : MasterVXLAN Overlay load bal: DisabledVXLAN ECMP            : DisabledFast Update           : Disabled

To enable Switching mode

set protocols l2-learning global-mode switching

JunOS recommended today would be Junos release 22.2R3-S2 as this resolves current issues with J-Web as well.

Kind Regards,

Head scratcher.  

I copied the config over from 320 to 340 and expected everything to just work.. :( IPv4  to devices on same subnet no longer can talk to each other.

IPv6 still works  as I can inter communicate with things on same vlan no problem. :) but it was never setup to have secondary networks .

vlan 10  irb.0  with 2 ipv4 networks

10.10.10.1/27 primary / preferred

10.10.10.49/27  (its not start or end of the subnet but it does not have to be)

Host IP 10.10.10.3 can hit anything in the 10.10.10.32/27 network no issues and vice versa. Hosts can access Internet just fine via IPv4 and IPv6.

However 10.10.10.0/27 to anything other that SRX gw nothing, and  hosts in 10.10.10.32/27 same  :/

I never get an arp back from hosts and when I static set arp with correct info still nothing.. Its like all traffic gets silently dropped by SRX .  

Makes me think I am hitting a bug ..  was srx320 was running 21.4R3-S4 .   340 running 22.4R2-S2.6  Had tried to 21.4R3-S5 but had funky other issues.

Just asking if anyone can suggest  best version of Junos they run on theirs .. Jtac recommended is  21.4R3-S4

Having a lot of odd issues with jdhcp too, but working on moving that over to a Kea server.

If you read this .. Thanks for your time.

Head scratcher.  

I copied the config over from 320 to 340 and expected everything to just work.. :( IPv4  to devices on same subnet no longer can talk to each other.

IPv6 still works  as I can inter communicate with things on same vlan no problem. :) but it was never setup to have secondary networks .

vlan 10  irb.0  with 2 ipv4 networks

10.10.10.1/27 primary / preferred

10.10.10.49/27  (its not start or end of the subnet but it does not have to be)

Host IP 10.10.10.3 can hit anything in the 10.10.10.32/27 network no issues and vice versa. Hosts can access Internet just fine via IPv4 and IPv6.

However 10.10.10.0/27 to anything other that SRX gw nothing, and  hosts in 10.10.10.32/27 same  :/

I never get an arp back from hosts and when I static set arp with correct info still nothing.. Its like all traffic gets silently dropped by SRX .  

Makes me think I am hitting a bug ..  was srx320 was running 21.4R3-S4 .   340 running 22.4R2-S2.6  Had tried to 21.4R3-S5 but had funky other issues.

Just asking if anyone can suggest  best version of Junos they run on theirs .. Jtac recommended is  21.4R3-S4

Having a lot of odd issues with jdhcp too, but working on moving that over to a Kea server.

If you read this .. Thanks for your time.

Since only the 10.10.10.49/27 seems to have the access outside the SRX subnet I would check the following.

1- 10.10.10.49/27 host devices have the correct gateway on the device.  Perhaps your dhcp issues are failing to provide the SRX interface as the gateway and making only local communications possible.

2-Confirm that the 10.10.10.49/27 subnet is included in the security policies that allow the 10.10.10.1/27 to successfully communicate outside the SRX.  You can also look to see if any policy is being hit using.

show security flow session source-prefix 10.10.10.49/27

3-check return routing.  Make sure the upstream routers know that the 10.10.10.1/27 subnet is reachable by the SRX interface facing them.  Since 10.10.10.49/27 is working there is some route from the upstream devices back to the SRX or a NAT rule on the SRX to the interface connecting to that router.  Make sure the route or NAT rule also covers the 10.10.10.49/27 subnet for the return traffic.

Head scratcher.  

I copied the config over from 320 to 340 and expected everything to just work.. :( IPv4  to devices on same subnet no longer can talk to each other.

IPv6 still works  as I can inter communicate with things on same vlan no problem. :) but it was never setup to have secondary networks .

vlan 10  irb.0  with 2 ipv4 networks

10.10.10.1/27 primary / preferred

10.10.10.49/27  (its not start or end of the subnet but it does not have to be)

Host IP 10.10.10.3 can hit anything in the 10.10.10.32/27 network no issues and vice versa. Hosts can access Internet just fine via IPv4 and IPv6.

However 10.10.10.0/27 to anything other that SRX gw nothing, and  hosts in 10.10.10.32/27 same  :/

I never get an arp back from hosts and when I static set arp with correct info still nothing.. Its like all traffic gets silently dropped by SRX .  

Makes me think I am hitting a bug ..  was srx320 was running 21.4R3-S4 .   340 running 22.4R2-S2.6  Had tried to 21.4R3-S5 but had funky other issues.

Just asking if anyone can suggest  best version of Junos they run on theirs .. Jtac recommended is  21.4R3-S4

Having a lot of odd issues with jdhcp too, but working on moving that over to a Kea server.

If you read this .. Thanks for your time.

Head scratcher.  

I copied the config over from 320 to 340 and expected everything to just work.. :( IPv4  to devices on same subnet no longer can talk to each other.

IPv6 still works  as I can inter communicate with things on same vlan no problem. :) but it was never setup to have secondary networks .

vlan 10  irb.0  with 2 ipv4 networks

10.10.10.1/27 primary / preferred

10.10.10.49/27  (its not start or end of the subnet but it does not have to be)

Host IP 10.10.10.3 can hit anything in the 10.10.10.32/27 network no issues and vice versa. Hosts can access Internet just fine via IPv4 and IPv6.

However 10.10.10.0/27 to anything other that SRX gw nothing, and  hosts in 10.10.10.32/27 same  :/

I never get an arp back from hosts and when I static set arp with correct info still nothing.. Its like all traffic gets silently dropped by SRX .  

Makes me think I am hitting a bug ..  was srx320 was running 21.4R3-S4 .   340 running 22.4R2-S2.6  Had tried to 21.4R3-S5 but had funky other issues.

Just asking if anyone can suggest  best version of Junos they run on theirs .. Jtac recommended is  21.4R3-S4

Having a lot of odd issues with jdhcp too, but working on moving that over to a Kea server.

If you read this .. Thanks for your time.

Head scratcher.  

I copied the config over from 320 to 340 and expected everything to just work.. :( IPv4  to devices on same subnet no longer can talk to each other.

IPv6 still works  as I can inter communicate with things on same vlan no problem. :) but it was never setup to have secondary networks .

vlan 10  irb.0  with 2 ipv4 networks

10.10.10.1/27 primary / preferred

10.10.10.49/27  (its not start or end of the subnet but it does not have to be)

Host IP 10.10.10.3 can hit anything in the 10.10.10.32/27 network no issues and vice versa. Hosts can access Internet just fine via IPv4 and IPv6.

However 10.10.10.0/27 to anything other that SRX gw nothing, and  hosts in 10.10.10.32/27 same  :/

I never get an arp back from hosts and when I static set arp with correct info still nothing.. Its like all traffic gets silently dropped by SRX .  

Makes me think I am hitting a bug ..  was srx320 was running 21.4R3-S4 .   340 running 22.4R2-S2.6  Had tried to 21.4R3-S5 but had funky other issues.

Just asking if anyone can suggest  best version of Junos they run on theirs .. Jtac recommended is  21.4R3-S4

Having a lot of odd issues with jdhcp too, but working on moving that over to a Kea server.

If you read this .. Thanks for your time.