SRX

Hey, 

What am I missing?

I'm trying to setup dynamic routing between our vSRXs through our physical infrastructure and I don't even see any received hellos. 

I know the physical side is working because I have OSPF routes connecting all our physical equipment. 

Here is my config (10.66.0.2 / 10.67.0.2 are part of Area 0 in the underlay physical network that is working)

admin@vSRX1# show security zones security-zone Transport 
host-inbound-traffic {
    system-services {
        ping;
        all;
    }
    protocols {
        ospf;
        all;
    }
}
interfaces {
    ge-0/0/0.660 {
        host-inbound-traffic {
            system-services {
                ping;
                all;
            }
            protocols {
                ospf;
                all;
            }
        }
    }
    ge-0/0/0.670 {
        host-inbound-traffic {
            system-services {
                ping;
                all;
            }
            protocols {                 
                ospf;
                all;
            }
        }
    }
}



admin@vSRX1# show protocols ospf 
area 0.0.0.0 {
    interface ge-0/0/0.660;
    interface ge-0/0/0.670;
}

admin@vSRX1# show security policies from-zone Transport to-zone Transport 
policy Permit-All {
    match {
        source-address any;
        destination-address any;
        application any;
    }
    then {
        permit;
    }
}
admin@vSRX1# show interfaces ge-0/0/0.670 
vlan-id 670;
family inet {
    address 10.67.0.3/24;
}

[edit]
admin@vSRX1# show interfaces ge-0/0/0.660                                    
vlan-id 660;
family inet {
    address 10.66.0.3/24;
}

Hi Nothing wrong from OSPF and security zone perspective as far as I can tell

Few more things to check. 

Are you able to ping directly connected link? For example from 10.66.0.2 to 10.66.0.3?

Is there any lo0 filter?

What do you see in "show ospf neighbor (detail)" and "show ospf interface (detail)" output?

Hey, 

Thanks for your reply. 

both my systems dont' seem to see each other at all. I've hard coded the router-id and neighbor just to see and still nothing.

I'm in the process of spinning up another vRouter of sorts and seeing if this is an ESXi problem because if you don't see anythign wrong, it might be that. 

admin@DEN-vSRX1# exit           

Exiting configuration mode

admin@DEN-vSRX1> show ospf neighbor detail 

admin@DEN-vSRX1> show ospf interface detail 

Interface           State   Area            DR ID           BDR ID          Nbrs

ge-0/0/0.660        DR      0.0.0.0         10.67.0.3       0.0.0.0            0

  Type: LAN, Address: 10.66.0.3, Mask: 255.255.255.0, MTU: 1500, Cost: 1

  DR addr: 10.66.0.3, Priority: 128

  Adj count: 0

  Hello: 10, Dead: 40, ReXmit: 5, Not Stub

  Auth type: None

  Protection type: None

  Topology default (ID 0) -> Cost: 1

ge-0/0/0.670        DR      0.0.0.0         10.67.0.3       0.0.0.0            0

  Type: LAN, Address: 10.67.0.3, Mask: 255.255.255.0, MTU: 1500, Cost: 1

  DR addr: 10.67.0.3, Priority: 128

  Adj count: 0

  Hello: 10, Dead: 40, ReXmit: 5, Not Stub

  Auth type: None

  Protection type: None

  Topology default (ID 0) -> Cost: 1

Hello there, 

Configuration is okay, can you run

>show ospf overview

Try pinging both sides and see if that works

Thank you, 

Franky

Sorry everyone.

I forgot to put the VLAN in ESXi.

Hence why ping doesn't work. This can be closed!