Certifications

Hello,

   I setup the  below Network diagram.  ISP-A and ISP-B are vMX .

 

  Each device has 3 logicals system wich are connected via logical tunnels  en run OSPF. So vGW-ISP-A belong to ISP-A  is connected to vGW-ISP-B which belong to ISP-B.  vGW-ISP-A and vGW-ISP-B have eBGP session

   ISP-A  The internal network L1,L2 & L3 has been aggregated to L on vGW-ISP-A  (aggregate route/area-range)  and export via eBGP.

   ISP-B  The internal network I1,I2 & I3 has been aggregated to I on vGW-ISP-B (aggregate route/area-range) and export via  eBGP.

This is my concern :

   1.  from vGW-ISP-A I could  just ping  Internal  @IP of vGW-ISP-A, respectibely 

        from vGW-ISP-A I could  just ping  Internal  @IP  of vGW-ISP-B

   2.  From Z & W I have full reachability to all internal @IP on ISP-B, repectively from X & Y  I have full reachbility to all internal @IP on ISP-A.

Thank for your support.

 

Are you exporting routes from bgp to ospf as well on your vGW?

Do you see all the routes on W,X,Y,Z routers(logical systems)?

 

 

Yes. I exporting bgp route to ospf on vGW. So I see all route on logical system. I wondered how from a given vGW I couldn't ping @IP others than remote vGW @ IP ?
Tomorrow I'll share route table,policy and protocols configuration.

Hi,

  Find below the routing table output of LS belong to each vMX.

1.   ISP-A 

   root@ISP-A> show route logical-system all

   logical-system: vGW-ISP-B

   inet.0: 15 destinations, 18 routes (15 active, 0 holddown, 0 hidden)
   + = Active Route, - = Last Active, * = Both

   10.0.5.0/30 *[Direct/0] 1d 01:16:40
   > via ge-0/0/1.0
   [BGP/170] 1d 00:43:55, localpref 100
   AS path: 65503 I, validation-state: unverified
   > to 10.0.5.2 via ge-0/0/1.0
   10.0.5.1/32 *[Local/0] 1d 01:16:41
   Local via ge-0/0/1.0
   10.15.0.0/16 *[OSPF/10] 1d 01:16:41, metric 16777215
   Discard
   [Aggregate/130] 1d 01:18:05
   Reject
   10.15.0.0/30 *[Direct/0] 1d 01:16:41
   > via lt-0/0/10.21
   10.15.0.2/32 *[Local/0] 1d 01:17:46
   Local via lt-0/0/10.21
   10.15.5.0/30 *[OSPF/10] 1d 01:15:51, metric 2
   to 10.15.0.1 via lt-0/0/10.21
   > to 10.15.10.2 via lt-0/0/10.23
   10.15.10.0/30 *[Direct/0] 1d 01:16:41
   > via lt-0/0/10.23
   10.15.10.1/32 *[Local/0] 1d 01:17:46
   Local via lt-0/0/10.23
   10.20.0.0/16 *[BGP/170] 1d 00:43:55, MED 16777215, localpref 100
   AS path: 65503 I, validation-state: unverified
   > to 10.0.5.2 via ge-0/0/1.0
   192.168.0.0/24 *[OSPF/10] 1d 01:17:49, metric 16777215
   Discard
   [Aggregate/130] 1d 01:18:05
   Reject
   192.168.0.1/32 *[OSPF/10] 1d 01:15:51, metric 1
   > to 10.15.0.1 via lt-0/0/10.21
   192.168.0.2/32 *[Direct/0] 1d 01:17:49
   > via lo0.1
   192.168.0.3/32 *[OSPF/10] 1d 01:15:51, metric 1
   > to 10.15.10.2 via lt-0/0/10.23
   192.168.1.0/24 *[BGP/170] 1d 00:43:55, MED 16777215, localpref 100
   AS path: 65503 I, validation-state: unverified
   > to 10.0.5.2 via ge-0/0/1.0
   224.0.0.5/32 *[OSPF/10] 1d 01:18:09, metric 1
   MultiRecv
   -----

   logical-system: Z

   inet.0: 11 destinations, 11 routes (11 active, 0 holddown, 0 hidden)
   + = Active Route, - = Last Active, * = Both

   10.15.0.0/30 *[OSPF/10] 1d 01:15:46, metric 2
   > to 10.15.5.1 via lt-0/0/10.31
   to 10.15.10.1 via lt-0/0/10.32
   10.15.5.0/30 *[Direct/0] 1d 01:16:41
   > via lt-0/0/10.31
   10.15.5.2/32 *[Local/0] 1d 01:17:46
   Local via lt-0/0/10.31
   10.15.10.0/30 *[Direct/0] 1d 01:16:41
   > via lt-0/0/10.32
   10.15.10.2/32 *[Local/0] 1d 01:17:46
   Local via lt-0/0/10.32
   10.20.0.0/16 *[OSPF/150] 1d 00:39:56, metric 16777214, tag 0
   > to 10.15.10.1 via lt-0/0/10.32
   192.168.0.1/32 *[OSPF/10] 1d 01:15:46, metric 1
   > to 10.15.5.1 via lt-0/0/10.31
   192.168.0.2/32 *[OSPF/10] 1d 01:15:51, metric 1
   > to 10.15.10.1 via lt-0/0/10.32
   192.168.0.3/32 *[Direct/0] 1d 01:17:49
   > via lo0.2
   192.168.1.0/24 *[OSPF/150] 1d 00:39:56, metric 16777214, tag 0
   > to 10.15.10.1 via lt-0/0/10.32
   224.0.0.5/32 *[OSPF/10] 1d 01:18:09, metric 1
   MultiRecv
   -----

   logical-system: W

   inet.0: 13 destinations, 13 routes (13 active, 0 holddown, 0 hidden)
   + = Active Route, - = Last Active, * = Both

   10.0.0.0/30 *[Direct/0] 1d 01:16:40
   > via ge-0/0/0.0
   10.0.0.2/32 *[Local/0] 1d 01:16:41
   Local via ge-0/0/0.0
   10.15.0.0/30 *[Direct/0] 1d 01:16:41
   > via lt-0/0/10.12
   10.15.0.1/32 *[Local/0] 1d 01:17:46
   Local via lt-0/0/10.12
   10.15.5.0/30 *[Direct/0] 1d 01:16:41
   > via lt-0/0/10.13
   10.15.5.1/32 *[Local/0] 1d 01:17:46
   Local via lt-0/0/10.13
   10.15.10.0/30 *[OSPF/10] 1d 01:15:46, metric 2
   to 10.15.0.2 via lt-0/0/10.12
   > to 10.15.5.2 via lt-0/0/10.13
   10.20.0.0/16 *[OSPF/150] 1d 00:39:56, metric 16777214, tag 0
   > to 10.15.0.2 via lt-0/0/10.12
   192.168.0.1/32 *[Direct/0] 1d 01:17:50
   > via lo0.0
   192.168.0.2/32 *[OSPF/10] 1d 01:15:51, metric 1
   > to 10.15.0.2 via lt-0/0/10.12
   192.168.0.3/32 *[OSPF/10] 1d 01:15:46, metric 1
   > to 10.15.5.2 via lt-0/0/10.13
   192.168.1.0/24 *[OSPF/150] 1d 00:39:56, metric 16777214, tag 0
   > to 10.15.0.2 via lt-0/0/10.12
   224.0.0.5/32 *[OSPF/10] 1d 01:18:09, metric 1
   MultiRecv
   -----

   logical-system: default

   root@ISP-A>

2. ISP-B 

   root@ISP-B> show route logical-system all

   logical-system: X

   inet.0: 12 destinations, 12 routes (12 active, 0 holddown, 0 hidden)
   + = Active Route, - = Last Active, * = Both

   10.0.15.0/30 *[Direct/0] 1d 00:08:21
   > via ge-0/0/1.0
   10.0.15.2/32 *[Local/0] 1d 00:08:22
   Local via ge-0/0/1.0
   10.20.0.0/30 *[Direct/0] 1d 00:08:23
   > via lt-0/0/10.21
   10.20.0.2/32 *[Local/0] 1d 00:09:26
   Local via lt-0/0/10.21
   10.20.5.0/30 *[OSPF/10] 1d 00:07:32, metric 2
   to 10.20.0.1 via lt-0/0/10.21
   > to 10.20.10.1 via lt-0/0/10.23
   10.20.10.0/30 *[Direct/0] 1d 00:08:23
   > via lt-0/0/10.23
   10.20.10.2/32 *[Local/0] 1d 00:09:26
   Local via lt-0/0/10.23
   10.25.0.0/16 *[Static/5] 1d 00:08:21
   > to 10.0.15.1 via ge-0/0/1.0
   192.168.1.1/32 *[OSPF/10] 1d 00:07:32, metric 1
   > to 10.20.10.1 via lt-0/0/10.23
   192.168.1.2/32 *[OSPF/10] 1d 00:07:32, metric 1
   > to 10.20.0.1 via lt-0/0/10.21
   192.168.1.3/32 *[Direct/0] 1d 00:09:27
   > via lo0.2
   224.0.0.5/32 *[OSPF/10] 1d 00:09:45, metric 1
   MultiRecv
   -----

   logical-system: vGW-ISP-Arouting-options
   -----

   logical-system: vGW-Customer-A

   inet.0: 14 destinations, 16 routes (14 active, 0 holddown, 0 hidden)
   + = Active Route, - = Last Active, * = Both

   10.0.10.0/30 *[Direct/0] 1d 00:08:21
   > via ge-0/0/0.0
   10.0.10.1/32 *[Local/0] 1d 00:08:22
   Local via ge-0/0/0.0
   10.20.0.0/16 *[OSPF/10] 1d 00:08:22, metric 16777215
   Discard
   [Aggregate/130] 1d 00:09:44
   Reject
   10.20.0.0/30 *[Direct/0] 1d 00:08:23
   > via lt-0/0/10.12
   10.20.0.1/32 *[Local/0] 1d 00:09:26
   Local via lt-0/0/10.12
   10.20.5.0/30 *[Direct/0] 1d 00:08:23
   > via lt-0/0/10.13
   10.20.5.1/32 *[Local/0] 1d 00:09:26
   Local via lt-0/0/10.13
   10.20.10.0/30 *[OSPF/10] 1d 00:07:27, metric 2
   to 10.20.0.2 via lt-0/0/10.12
   > to 10.20.5.2 via lt-0/0/10.13
   10.25.0.0/16 *[OSPF/150] 1d 00:07:32, metric 0, tag 0
   > to 10.20.0.2 via lt-0/0/10.12
   192.168.1.0/24 *[OSPF/10] 1d 00:09:27, metric 16777215
   Discard
   [Aggregate/130] 1d 00:09:44
   Reject
   192.168.1.1/32 *[OSPF/10] 1d 00:07:27, metric 1
   > to 10.20.5.2 via lt-0/0/10.13
   192.168.1.2/32 *[Direct/0] 1d 00:09:27
   > via lo0.1
   192.168.1.3/32 *[OSPF/10] 1d 00:07:32, metric 1
   > to 10.20.0.2 via lt-0/0/10.12
   224.0.0.5/32 *[OSPF/10] 1d 00:09:45, metric 1
   MultiRecv
   -----

   logical-system: vGW-ISP-A

   inet.0: 16 destinations, 19 routes (16 active, 0 holddown, 0 hidden)
   + = Active Route, - = Last Active, * = Both

   10.0.5.0/30 *[Direct/0] 1d 00:08:21
   > via ge-0/0/2.0
   [BGP/170] 17:28:30, localpref 100
   AS path: 65502 I, validation-state: unverified
   > to 10.0.5.1 via ge-0/0/2.0
   10.0.5.2/32 *[Local/0] 1d 00:08:22
   Local via ge-0/0/2.0
   10.15.0.0/16 *[BGP/170] 17:28:30, MED 16777215, localpref 100
   AS path: 65502 I, validation-state: unverified
   > to 10.0.5.1 via ge-0/0/2.0
   10.20.0.0/16 *[OSPF/10] 1d 00:08:22, metric 16777215
   Discard
   [Aggregate/130] 1d 00:09:44
   Reject
   10.20.0.0/30 *[OSPF/10] 1d 00:07:27, metric 2
   > to 10.20.5.1 via lt-0/0/10.31
   to 10.20.10.2 via lt-0/0/10.32
   10.20.5.0/30 *[Direct/0] 1d 00:08:23
   > via lt-0/0/10.31
   10.20.5.2/32 *[Local/0] 1d 00:09:26
   Local via lt-0/0/10.31
   10.20.10.0/30 *[Direct/0] 1d 00:08:23
   > via lt-0/0/10.32
   10.20.10.1/32 *[Local/0] 1d 00:09:26
   Local via lt-0/0/10.32
   10.25.0.0/16 *[OSPF/150] 1d 00:07:32, metric 0, tag 0
   > to 10.20.10.2 via lt-0/0/10.32
   192.168.0.0/24 *[BGP/170] 17:28:30, MED 16777215, localpref 100
   AS path: 65502 I, validation-state: unverified
   > to 10.0.5.1 via ge-0/0/2.0
   192.168.1.0/24 *[OSPF/10] 1d 00:09:27, metric 16777215
   Discard
   [Aggregate/130] 1d 00:09:44
   Reject
   192.168.1.1/32 *[Direct/0] 1d 00:09:27
   > via lo0.0
   192.168.1.2/32 *[OSPF/10] 1d 00:07:27, metric 1
   > to 10.20.5.1 via lt-0/0/10.31
   192.168.1.3/32 *[OSPF/10] 1d 00:07:32, metric 1
   > to 10.20.10.2 via lt-0/0/10.32
   224.0.0.5/32 *[OSPF/10] 1d 00:09:45, metric 1
   MultiRecv
   -----

   logical-system: default

In attached file is Policy and protocols configuration on vGW

Metric for ospf routes are infinite. do you these routes installed in forwarding table?

 

you can check that "show route forwarding-table" ?

 

Also, can you please share your full config? your above output is confusing to me.

 

Find in attached files  configuration of both vMX.

Your configuration (logical system name) doesn't match with your diagram shared in the first post. Can you change the logical system name in your configuration according to your diagram and share?

 

Thanks Singhh to pay attention on this post.

 Please find in attached files, updated configuration  and  frowarding table for each vMX according to the network diagram shared.

Hi,

 

Your configuration is good. I can ping successfully.

 

[edit]
root@R2_re# show logical-systems Z
interfaces {
    lt-0/0/10 {
        unit 31;
        unit 32;
    }
    lo0 {
        unit 2;
    }
}
protocols {
    ospf {
        area 0.0.0.0 {
            interface lo0.2 {
                passive;
            }
            interface lt-0/0/10.31;
            interface lt-0/0/10.32;
        }
    }
}
routing-options {
    autonomous-system 65502;
}

[edit]
root@R2_re# show interfaces lo0.2
family inet {
    address 192.168.0.3/32;
}

[edit]
root@R2_re# run ping 10.20.0.1 logical-system Z source 192.168.0.3
PING 10.20.0.1 (10.20.0.1): 56 data bytes
64 bytes from 10.20.0.1: icmp_seq=0 ttl=62 time=2.445 ms
64 bytes from 10.20.0.1: icmp_seq=1 ttl=62 time=2.454 ms
^C
--- 10.20.0.1 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 2.445/2.450/2.454/0.004 ms

[edit]
root@R2_re# run ping 10.20.0.1 logical-system Z
PING 10.20.0.1 (10.20.0.1): 56 data bytes
64 bytes from 10.20.0.1: icmp_seq=0 ttl=62 time=57.692 ms
64 bytes from 10.20.0.1: icmp_seq=1 ttl=62 time=2.224 ms
^C
--- 10.20.0.1 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 2.224/29.958/57.692/27.734 ms

[edit]
root@R2_re#

 

 

The only thing is that you need to use correct source when pinging from vGW-ISP-B because when you don't specify the source ip, it will take outgoing interface IP (10.0.5.1) and your ping will fail because logical system X doesn't have reverse route for that ip.

 

[edit]
root@R1_re# run show route logical-system X 10.0.5.1

[edit]
root@R1_re# run show route logical-system X 192.168.0.2

inet.0: 13 destinations, 13 routes (13 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

192.168.0.0/24     *[OSPF/150] 00:13:39, metric 0, tag 0
                    > to 10.20.5.2 via lt-0/0/10.13

[edit]
root@R1_re#

 

root@R2_re# run ping 10.20.0.1 logical-system vGW-ISP-B source 192.168.0.2
PING 10.20.0.1 (10.20.0.1): 56 data bytes
64 bytes from 10.20.0.1: icmp_seq=0 ttl=63 time=2.399 ms
64 bytes from 10.20.0.1: icmp_seq=1 ttl=63 time=1.767 ms
64 bytes from 10.20.0.1: icmp_seq=2 ttl=63 time=43.573 ms
^C
--- 10.20.0.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.767/15.913/43.573/19.560 ms

[edit]
root@CE2_re#

HTH

Hello Singhh,

  Thanks once again for your support. Effectively I noticed that network 10.0.5.0/30 isn't propagated in X,Y,W,Z. This

is why from vGW I couldn't ping @IP of those devices. So from both vGW I exported this network to OSPF and now everthing is OK  😉 .