Hi All
A quick question please, perhaps I'm missing somehing.
I have a pair of QFX10K, they're connected with 2x100G in LACP Lag.
Both are connected to a firewall cluster, and the irb interface servs as their L3 Interfaces.
1st machine
show configuration interfaces irb.999
family inet {
address 10.199.4.11/24 {
vrrp-group 99 {
virtual-address 10.199.4.4;
priority 95;
fast-interval 100;
preempt {
hold-time 180;
}
accept-data;
authentication-type simple;
authentication-key ; ## SECRET-DATA
2nd machine
show configuration interfaces irb.999
description "[INTERSITE][vrf INTER-SITE-FW]";
family inet {
address 10.199.4.12/24 {
vrrp-group 99 {
virtual-address 10.199.4.4;
priority 105;
fast-interval 100;
preempt {
hold-time 180;
}
accept-data;
authentication-type simple;
authentication-key ; ## SECRET-DATA
}
}
vrrp is up on both ends.
1> show vrrp brief
Interface State Group VR state VR Mode Timer Type Address
irb.999 up 99 backup Active D 0.360 lcl 10.199.4.11
vip 10.199.4.4
mas 10.199.4.12
2> show vrrp brief
Interface State Group VR state VR Mode Timer Type Address
irb.999 up 99 master Active A 0.088 lcl 10.199.4.12
vip 10.199.4.4
vlan 999 runs between ae2 which is the ae connected directly between the qfx
2> show vlans 999
Routing instance VLAN name Tag Interfaces
default-switch v999 999
ae10.0*
ae2.0*
ae20.0*
but i can't ping from irb.999 in 1st switch to irb.999 in 2nd switch (.11 to .12, .12 to .11)
both can ping the vip (.4)
should i be able to ping between the l3 interfaces?