Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
Hello Everyone,Here is my question. Currently I have two Juniper SRX 300's that have a routing device between them, which then goes through a VPN. Also, my firewall global mode is currently set to switching under protocols.The interface connected to the routing device uses INET and then I have an IRB interface with a private IP address which is assigned to a vlan that my other interface are assigned to.EXMP:GE-0/0/0 unit 0 family inet address 10.0.0.1/24GE-0/0/1 unit 0 family ethernet switching interface mode access vlan members INSIDEirb unit 0 family inet address 192.168.1.1/24vlan INSIDE vlan id 10l3-interface irb.0Both SRX's are configure very similar to what you see above, and when they are connected to either side of the VPN, I can ping the irb address, but I can't ping any device connected to ge-0/0/1 which is using the INSIDE vlan and has an ip address assigned to it within the same subnet as irb.0.Is the reason I can't ping because the SRX is in global mode l2-learning switching? Is there something else I can do to get this to work?p.s.Zones and polices have also been set to allow traffic bi-directionally between the required zones.Thanks,Matt
I had a similar problem recently with my SRX300 running Junos 15.1X49-D45.Weird things observed were, I couldn't communicate unicast with devices on the LAN, but, I could get them to respond to broadcast ping, using "ping 192.168.1.255"... then I would see responses from the devices. ...but, they still would not show up in the ARP cache ... "show arp no-resolve"I upgraded like this... 15.1X49-D45 ---> 19.4R3-S11.2 ---> 21.4R3-S3.4
IIRC, the problem was gone with the first upgrade to 19.4R3