Support Support Downloads Knowledge Base Apex Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] Dynamic routing protocol RIP usage on IPsec tunnels is inconsistent

0

0

Article ID: KB19858 KB Last Updated: 12 Apr 2016Version: 4.0
Summary:

When using Routing Information Protocol-demand circuits (RIP-DC) over IPsec VPN tunnels, or when using RIP on point-to-multipoint (P2MP) VPN tunnels, inconsistent behavior might be seen.

Symptoms:

When using dynamic routing protocol RIP over P2MP VPN tunnels, or when using RIP-DC over IPsec tunnels, the following behaviors might be seen:

  • Inability to establish RIP neighborship
  • RIP neighbors going down with no tunnel instability
  • RIP routes not being installed
  • RIP routes not being removed
  • RIP routes being removed or flapping unexpectedly
Cause:

Dynamic routing protocol RIP is not supported for use with the following VPN tunnel setups:

  • RIP over P2MP VPN interface, including AutoVPN deployments
  • RIP-DC over P2MP VPN interface
  • RIP-DC over P2P VPN tunnel prior to Junos 12.3X48-D25 and 15.1X49-D40

Solution:

Dynamic routing protocols Open Shortest Path First (OSPF) or Internal Border Gateway Protocol (IBGP) are recommended for dynamic routing over VPN interfaces.

Dynamic routing protocol RIP using Demand Circuit (RIP-DC) over P2P VPN interface is supported in the following Junos releases

  • Junos 12.3X48-D25 and subsequent releases
  • Junos 15.1X49-D40 and subsequent releases

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search