Ok everyone... thanks to Doug the l3mpls-vpn problem is solved.. the issue wasn't on the VPN configuration side but rather on the security policy side.. and simply by removing the security policy and setting mpls mode packet-based as the only security policy it is all fixed now.
“delete security” and “set security forwarding-options family mpls mode packet-based” thanks a lot everyone for all the help ! On Sun, Mar 13, 2011 at 4:14 AM, Doug Hanks <[email protected]> wrote: > Can we at least see the "show config | no-more" and "show route prefix/mask > extensive | no-more" outputs on each of the routers? > > -----Original Message----- > From: [email protected] [mailto: > [email protected]] On Behalf Of Vlad Ion > Sent: Saturday, March 12, 2011 1:22 AM > To: [email protected] > Cc: [email protected] > Subject: Re: [j-nsp] l3vpn help needed > > > ping routing-instance vpn-a 10.10.2.254 source 10.10.1.253 > PING 10.10.2.254 (10.10.2.254): 56 data bytes > ^C > --- 10.10.2.254 ping statistics --- > 4 packets transmitted, 0 packets received, 100% packet loss > > I'm missing something but I just have no idea what... and I'm quite sure it > is one of those small things you just can't see anymore after staring too > long at it > > On Sat, Mar 12, 2011 at 3:01 AM, [email protected] <[email protected]> wrote: > > > Hi, > > > > I was thinking pinging the remote if with source address local if. > > > > /bt > > > > ----- Reply message ----- > > Fra: "Vlad Ion" <[email protected]> > > Til: "Bjørn Tore" <[email protected]> > > Kopi: <[email protected]> > > Emne: [j-nsp] l3vpn help needed > > Dato: fre., mars 11, 2011 19:47 > > > > > > hi Bjørn, > > > > If I ping 10.10.1.254 (local vrrp interface or 10.10.1.253 local physical > > interface)... I get 100% success rate. > > > > Br, > > Vlad > > > > On Fri, Mar 11, 2011 at 3:56 PM, Bjørn Tore <[email protected]> wrote: > > > >> Den 11.03.2011 12:45, skrev Vlad Ion: > >> > >>> ping routing-instance vpn-a 10.10.2.254 > >>> > >>> PING 10.10.2.254 (10.10.2.254): 56 data bytes > >>> ^C > >>> --- 10.10.2.254 ping statistics --- > >>> 6 packets transmitted, 0 packets received, 100% packet loss > >>> _______________________________________________ > >>> juniper-nsp mailing list [email protected] > >>> https://puck.nether.net/mailman/listinfo/juniper-nsp > >>> > >> What happens if you specify your local interface-address as source > >> address? > >> > >> > >> -- > >> Bjørn Tore Paulen > >> Holsjordet 45 > >> Tlf 95981603 > >> > >> > >> _______________________________________________ > >> > >> juniper-nsp mailing list [email protected] > >> https://puck.nether.net/mailman/listinfo/juniper-nsp > >> > > > > > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
