Junos OS

I got my three of my five SRX100 routers up and running, accessible with configs on them and connected together. 

The next thing I am trying to do is put ip addresses on the interfaces and see if I can ping from one router to the next. This is something I've done hundreds of times in a virtual environment, and I don't know why it is not working. Is there something I am missing?

Here is exactly what I did:

on ROUTER-1 I configured ip address 10.10.12.1/24 on fe-0/0/0.0

on ROUTER-2 I configured ip address 10.10.12.2/24 on fe-0/0/0.0 

and I connect the fe-0/0/0 ports together with a patch cable, lights come on and show interface command tells me ports are up on both routers.

Now I console in to either of the routers.

On either router I can ping the local address on port fe-0/0/0 and the local loopback that I also configured, but not the address on the other side of the link.

Here is an example of the way I configured the ports:

Ben@ROUTER-2# show interfaces
fe-0/0/0 {
    unit 0 {
        family inet {
            address 10.10.12.2/24;
        }
    }

Any help greatly appreciated.

Ben

Ben,

These are zone-based security appliances, not routers, and as such the interfaces need to be in security zones.  You also need to allow system services host-inbound-traffic.

Host-inbound-traffic is for traffic destined to the firewall itself, where zone policies govern traffic transiting the device.

Security Zones | Junos OS | Juniper Networks

system-services (Security Zones Host Inbound Traffic) | Junos OS | Juniper Networks

I got my three of my five SRX100 routers up and running, accessible with configs on them and connected together. 

The next thing I am trying to do is put ip addresses on the interfaces and see if I can ping from one router to the next. This is something I've done hundreds of times in a virtual environment, and I don't know why it is not working. Is there something I am missing?

Here is exactly what I did:

on ROUTER-1 I configured ip address 10.10.12.1/24 on fe-0/0/0.0

on ROUTER-2 I configured ip address 10.10.12.2/24 on fe-0/0/0.0 

and I connect the fe-0/0/0 ports together with a patch cable, lights come on and show interface command tells me ports are up on both routers.

Now I console in to either of the routers.

On either router I can ping the local address on port fe-0/0/0 and the local loopback that I also configured, but not the address on the other side of the link.

Here is an example of the way I configured the ports:

Ben@ROUTER-2# show interfaces
fe-0/0/0 {
    unit 0 {
        family inet {
            address 10.10.12.2/24;
        }
    }

Any help greatly appreciated.

Ben

I got my three of my five SRX100 routers up and running, accessible with configs on them and connected together. 

The next thing I am trying to do is put ip addresses on the interfaces and see if I can ping from one router to the next. This is something I've done hundreds of times in a virtual environment, and I don't know why it is not working. Is there something I am missing?

Here is exactly what I did:

on ROUTER-1 I configured ip address 10.10.12.1/24 on fe-0/0/0.0

on ROUTER-2 I configured ip address 10.10.12.2/24 on fe-0/0/0.0 

and I connect the fe-0/0/0 ports together with a patch cable, lights come on and show interface command tells me ports are up on both routers.

Now I console in to either of the routers.

On either router I can ping the local address on port fe-0/0/0 and the local loopback that I also configured, but not the address on the other side of the link.

Here is an example of the way I configured the ports:

Ben@ROUTER-2# show interfaces
fe-0/0/0 {
    unit 0 {
        family inet {
            address 10.10.12.2/24;
        }
    }

Any help greatly appreciated.

Ben

If your labs have no need of firewall, you can switch the SRX to packet mode and it will behave as a router and no other configuration would be needed.  This can be reversed back to flow mode when you experiment with firewall features when needed.

https://supportportal.juniper.net/s/article/SRX-How-to-change-forwarding-mode-for-IPv4-from-flow-based-to-packet-based?language=en_US

I got my three of my five SRX100 routers up and running, accessible with configs on them and connected together. 

The next thing I am trying to do is put ip addresses on the interfaces and see if I can ping from one router to the next. This is something I've done hundreds of times in a virtual environment, and I don't know why it is not working. Is there something I am missing?

Here is exactly what I did:

on ROUTER-1 I configured ip address 10.10.12.1/24 on fe-0/0/0.0

on ROUTER-2 I configured ip address 10.10.12.2/24 on fe-0/0/0.0 

and I connect the fe-0/0/0 ports together with a patch cable, lights come on and show interface command tells me ports are up on both routers.

Now I console in to either of the routers.

On either router I can ping the local address on port fe-0/0/0 and the local loopback that I also configured, but not the address on the other side of the link.

Here is an example of the way I configured the ports:

Ben@ROUTER-2# show interfaces
fe-0/0/0 {
    unit 0 {
        family inet {
            address 10.10.12.2/24;
        }
    }

Any help greatly appreciated.

Ben

Thanks. I didn't know. So the SRX100 is basically a firewall, I guess. 

I will try that. 

Thank you.

If your labs have no need of firewall, you can switch the SRX to packet mode and it will behave as a router and no other configuration would be needed.  This can be reversed back to flow mode when you experiment with firewall features when needed.

https://supportportal.juniper.net/s/article/SRX-How-to-change-forwarding-mode-for-IPv4-from-flow-based-to-packet-based?language=en_US

I got my three of my five SRX100 routers up and running, accessible with configs on them and connected together. 

The next thing I am trying to do is put ip addresses on the interfaces and see if I can ping from one router to the next. This is something I've done hundreds of times in a virtual environment, and I don't know why it is not working. Is there something I am missing?

Here is exactly what I did:

on ROUTER-1 I configured ip address 10.10.12.1/24 on fe-0/0/0.0

on ROUTER-2 I configured ip address 10.10.12.2/24 on fe-0/0/0.0 

and I connect the fe-0/0/0 ports together with a patch cable, lights come on and show interface command tells me ports are up on both routers.

Now I console in to either of the routers.

On either router I can ping the local address on port fe-0/0/0 and the local loopback that I also configured, but not the address on the other side of the link.

Here is an example of the way I configured the ports:

Ben@ROUTER-2# show interfaces
fe-0/0/0 {
    unit 0 {
        family inet {
            address 10.10.12.2/24;
        }
    }

Any help greatly appreciated.

Ben

------------------------------
BEN FELDMAN
------------------------------

If your labs have no need of firewall, you can switch the SRX to packet mode and it will behave as a router and no other configuration would be needed.  This can be reversed back to flow mode when you experiment with firewall features when needed.

https://supportportal.juniper.net/s/article/SRX-How-to-change-forwarding-mode-for-IPv4-from-flow-based-to-packet-based?language=en_US

I got my three of my five SRX100 routers up and running, accessible with configs on them and connected together. 

The next thing I am trying to do is put ip addresses on the interfaces and see if I can ping from one router to the next. This is something I've done hundreds of times in a virtual environment, and I don't know why it is not working. Is there something I am missing?

Here is exactly what I did:

on ROUTER-1 I configured ip address 10.10.12.1/24 on fe-0/0/0.0

on ROUTER-2 I configured ip address 10.10.12.2/24 on fe-0/0/0.0 

and I connect the fe-0/0/0 ports together with a patch cable, lights come on and show interface command tells me ports are up on both routers.

Now I console in to either of the routers.

On either router I can ping the local address on port fe-0/0/0 and the local loopback that I also configured, but not the address on the other side of the link.

Here is an example of the way I configured the ports:

Ben@ROUTER-2# show interfaces
fe-0/0/0 {
    unit 0 {
        family inet {
            address 10.10.12.2/24;
        }
    }

Any help greatly appreciated.

Ben