Hi
I have SRX100 running 11.4R6.5 and I cannot make VRRP working. I have
configuration like below:
admin@srx100> show configuration interfaces fe-0/0/0
unit 0 {
family inet {
address 10.0.0.69/29 {
vrrp-group 0 {
virtual-address 10.0.0.70;
priority 253;
}
}
}
}
admin@srx100> show vrrp
Interface State Group VR state VR Mode Timer Type Address
fe-0/0/0.0 up 0 master Active A 0.128 lcl 10.0.0.69
vip 10.0.0.70
But I cannot ping 10.0.0.70 from host in this subnet (10.0.0.68) and
also from SRX inself:
I'm able to ping 10.0.0.69 without problem from SRX and host 10.0.0.68.
admin@srx100> ping 10.0.0.70
PING 10.0.0.70 (10.0.0.70): 56 data bytes
ping: sendto: No route to host
^C
--- 10.0.0.70 ping statistics ---
1 packets transmitted, 0 packets received, 100% packet loss
What I did wrong ? I also added protocol VRRP to security, but didn't helped :(
Security config:
admin@srx100> show configuration security zones security-zone untrust
interfaces {
fe-0/0/0.0 {
host-inbound-traffic {
system-services {
dhcp;
ping;
ike;
ssh;
https;
}
protocols {
vrrp;
}
}
}
}
Rob
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
