Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

SSG is unable to pass traffic through Frame-Relay connection (LMI status changing UP and DOWN)

0

0

Article ID: KB9541 KB Last Updated: 24 Jun 2010Version: 5.0
Summary:
SSG is unable to pass traffic through Frame-Relay connection (LMI status changing UP and DOWN)
Symptoms:
Customer is unable to pass traffic through the Frame-Relay connection.  The logs are indicating the serial interface is bouncing between Up and Down:

2007-01-29 18:03:46 system notif 00569 [fr/lmi]: serial2/0.1 dlci(16) status
                                       changed to   I.
2007-01-29 18:03:46 system notif 00569 [fr/lmi]: serial2/0 LMI status changed
                                       to DOWN.
2007-01-29 18:03:46 system notif 00513 The physical state of interface
                                       serial2/0 has changed to Down.
2007-01-29 18:02:46 system notif 00569 [fr/lmi]: serial2/0.1 dlci(16) status
                                       changed to   A.
2007-01-29 18:02:46 system notif 00569 [fr/lmi]: serial2/0 LMI status changed
                                       to UP.
2007-01-29 18:02:46 system notif 00513 The physical state of interface
                                       serial2/0 has changed to Up.
2007-01-29 18:02:29 system notif 00569 [fr/lmi]: serial2/0.1 dlci(16) status
                                       changed to   I.
2007-01-29 18:02:29 system notif 00569 [fr/lmi]: serial2/0 LMI status changed
                                       to DOWN.
2007-01-29 18:02:29 system notif 00513 The physical state of interface
                                       serial2/0 has changed to Down.
2007-01-29 18:00:28 system notif 00569 [fr/lmi]: serial2/0.1 dlci(16) status
                                       changed to   A.
2007-01-29 18:00:28 system notif 00569 [fr/lmi]: serial2/0 LMI status changed
                                       to UP.
2007-01-29 18:00:28 system notif 00513 The physical state of interface
                                       serial2/0 has changed to Up.
2007-01-29 18:00:08 system notif 00569 [fr/lmi]: serial2/0.1 dlci(16) status
                                       changed to   I.
2007-01-29 18:00:08 system notif 00569 [fr/lmi]: serial2/0 LMI status changed
                                       to DOWN.
2007-01-29 18:00:08 system notif 00513 The physical state of interface
                                       serial2/0 has changed to Down

The CLI command get interface of the serial interface displays the following:

ssg20-wlan-> get inter serial2/0.1          
Interface serial2/0.1:
  description serial2/0.1
  number 24, if_info 2120, if_index 1, encap frame-relay, mode route
  link up, link protocol up, phy-link up
  vsys Root, zone Untrust, vr trust-vr
  admin mtu 1500, operating mtu 1500, default mtu 1500
  *ip 68.89.202.118/30
  *manage ip 68.89.202.118
  route-deny disable
  pmtu-v4 disabled
  ping enabled, telnet disabled, SSH disabled, SNMP disabled
  web disabled, ident-reset disabled, SSL disabled
  DNS Proxy disabled, webauth disabled, webauth-ip 0.0.0.0
  OSPF disabled  BGP disabled  RIP disabled  RIPng disabled  mtrace disabled
  PIM: not configured  IGMP not configured
  bandwidth: physical 0kbps, configured egress [gbw 0kbps mbw 0kbps]
             configured ingress mbw 0kbps, current bw 0kbps
             total allocated gbw 0kbps

Solution:

LMI keepalive was configured on the frame relay switch at the ISP.  However, by default, LMI keepalives are Enabled on the SSG products. 

This may be confirmed by running the following command on a interface which encapsulation is Frame-relay:

get int ser1/0 frame-relay lmi

To enable LMI keepalives on the SSG device, issue the following CLI command:

unset interface "serial2/0" frame-relay lmi no-keepalive

When troubleshooting Frame Relay between Juniper Firewalls and other devices, please also check following options:
LMI-type:                                         itu, ansi
Inverse ARP:                                  Disabled by default
Frame Relay Encapsulation:     IETF RFC 1490
The frame-relay info and parameters may be checked with the command :
get int ser1/0 frame

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search