Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

Problem to connect SRX to Cisco router

$
0
0

ello all,

I try to connect a Juniper SRX with a Cisco 1841. The first one is connected with a VLAN interface:

reth0 {
        description "Link to Cisco 1841";
        vlan-tagging;
        redundant-ether-options {
            redundancy-group 1;
        }
        unit 81 {
            vlan-id 81;
            family inet {
                address 192.168.81.254/24;
            }
        }
    }

and a second:

interface FastEthernet0/1/0
 switchport access vlan 81
 no ip address

interface Vlan81
 ip address 192.168.81.1 255.255.255.0

At this moment I not able to ping the interface in a both ways, but I do a "show arp" on the both equipment:

3c:8a:b0:2a:32:b0 30.17.0.2       30.17.0.2                 fab0.0              permanent
50:c5:8d:33:f6:30 30.18.0.1       30.18.0.1                 fab1.0              permanent
3c:8a:b0:2a:32:47 130.16.0.1      130.16.0.1                fxp1.0              none
00:17:95:dc:49:48 192.168.6.1     192.168.6.1               fxp0.0              none
00:0a:b8:51:b9:c1 192.168.6.10    192.168.6.10              fxp0.0              none
a4:93:4c:ee:5f:a6 192.168.111.1   192.168.111.1             reth1.0             none

Cisco:

Internet  192.168.81.1            -   0018.7345.de88  ARPA   Vlan81
Internet  192.168.81.254          0   0010.dbff.1000  ARPA   Vlan81

and I don't understand why I see the entries in the Cisco equipment and It's empty into the Juniper equipment.

And I suppose this is for that the both equipment don't communicate.

I put for you all configuration for you see all configuration:

 

version 12.1X47-D35.2;
groups {
    node0 {
        system {
            host-name EROS;
        }
        interfaces {
            fxp0 {
                unit 0 {
                    family inet {
                        address 192.168.6.30/24;
                    }
                }
            }
        }
    }
    node1 {
        system {
            host-name HADES;
        }
        interfaces {
            fxp0 {
                unit 0 {                
                    family inet {
                        address 192.168.6.31/24;
                    }
                }
            }
        }
    }
}
apply-groups "${node}";
system {
    domain-name xxxx.corp;
        root-authentication {
        encrypted-password "xxxxxxxxxxxxxxxxxx"; ## SECRET-DATA
    }
    name-server {
        192.168.100.4;
    }
    login {
        user xxxx {
            uid 2000;
            class super-user;
            authentication {            
                encrypted-password "xxxxxxxxxxxxxxxx"; ## SECRET-DATA
            }
        }
    }
    services {
        ssh {
            root-login deny;
            protocol-version v2;
            rate-limit 2;
        }
        xnm-clear-text;
        web-management {
            https {
                system-generated-certificate;
                interface fxp0.0;
            }
        }
    }
    syslog {
        archive size 100k files 3;
        user * {
            any emergency;              
        }
        file messages {
            any critical;
            authorization info;
        }
        file interactive-commands {
            interactive-commands error;
        }
    }
    max-configurations-on-flash 5;
    max-configuration-rollbacks 5;
    license {
        autoupdate {
            url https://ae1.juniper.net/junos/key_retrieval;
        }
    }
    ntp {
        server 192.168.111.1 prefer;
    }
}
chassis {
    cluster {
        reth-count 2;                   
        redundancy-group 0 {
            node 0 priority 200;
            node 1 priority 100;
        }
        redundancy-group 1 {
            node 0 priority 200;
            node 1 priority 100;
            interface-monitor {
                fe-0/0/1 weight 255;
                fe-1/0/1 weight 255;
                fe-0/0/2 weight 255;
                fe-1/0/2 weight 255;
            }
        }
    }
}
interfaces {
    fe-0/0/1 {
        description "Link to Cisco 1841 Fe0/1/0";
        fastether-options {
            redundant-parent reth0;
        }
    }                                   
    fe-0/0/2 {
        fastether-options {
            redundant-parent reth1;
        }
    }
    fe-1/0/1 {
        description "Link to Cisco 1841 Fe0/1/1";
        fastether-options {
            redundant-parent reth0;
        }
    }
    fe-1/0/2 {
        fastether-options {
            redundant-parent reth1;
        }
    }
    fab0 {
        fabric-options {
            member-interfaces {
                fe-0/0/0;
            }
        }
    }                                   
    fab1 {
        fabric-options {
            member-interfaces {
                fe-1/0/0;
            }
        }
    }
    reth0 {
        description "Link to Cisco 1841";
        vlan-tagging;
        redundant-ether-options {
            redundancy-group 1;
        }
        unit 81 {
            vlan-id 81;
            family inet {
                address 192.168.81.254/24;
            }
        }
    }
    reth1 {
        redundant-ether-options {
            redundancy-group 1;         
        }
        unit 0 {
            family inet {
                address 192.168.111.30/24;
            }
        }
    }
}
protocols {
    stp;
}
security {
    zones {
        security-zone Trusted {
            host-inbound-traffic {
                system-services {
                    all;
                }
            }
            interfaces {
                reth0.81;
            }
        }                               
        security-zone Untrusted {
            host-inbound-traffic {
                system-services {
                    ping;
                }
            }
            interfaces {
                reth1.0;
            }
        }
        security-zone MGMT;
    }
}
routing-instances {
    RI-VR-LAN {
        instance-type virtual-router;
        interface reth0.81;
        routing-options {
            static {
                route 192.168.100.0/24 next-hop 192.168.81.1;
            }
        }
    }                                   
}[

Thank you for your help...


Viewing all articles
Browse latest Browse all 3959

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>