-
Notifications
You must be signed in to change notification settings - Fork 20
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
TF configure a wrong dest-address for "firewall family inet filter" to mx #3
Comments
Hi,
|
Hi tnaganawa
Step 4: Check new added configuration on vmx, but still set groups contrail firewall family inet filter _contrail_redirect-to-public-vrfs-inet4 term term-_contrail_k8s-default-pod-network-l3-5 from destination-address 0.0.0.0/0 Still "0.0.0.0/0" instead of "10.10.40.0/24". :( Could you please correct me if any step was not same as you tried to describe? |
Hi, Sorry for my late reply .. Could you try 'User Defined' in 'Subnets' > 'Allocation Mode'? If it worked, destination-address will be filled with that subnet .. Best Regards, |
Hmm, I might be wrong, but could you try to add Or, if vMX license also might be an issue ..
|
Hi tnaganawa There is no “set chassis fpc 0 pic 0 tunnel-service” available.
|
Hi Tnaganawa
(1)create ipam:ipam-03 10.10.30.0/24
(2)ccreate virtual-network:net-3 with ipam-03
(3)extend net-03 to MX
(4)check added configuration on MX
set groups contrail firewall family inet filter _contrail_redirect-to-public-vrfs-inet4 term term-_contrail_net03-l3-13 from destination-address 0.0.0.0/0
set groups contrail firewall family inet filter _contrail_redirect-to-public-vrfs-inet4 term term-_contrail_net03-l3-13 then routing-instance _contrail_net03-l3-13
set groups contrail firewall family inet filter _contrail_redirect-to-public-vrfs-inet4 term default-term then accept
This filter would block traffic between mx and TF-controller so the BGP neighbor turned down. This same issue exist on R1912 and R2003.
According to my understanding, “0.0.0.0/0” should be “10.10.30.0/24”。
Any suggestion?
The text was updated successfully, but these errors were encountered: