<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><font face="Calibri"><span style="font-size: 15px;">Check for a firewall filter on the egress of the interface, or a firewall filter applied to lo0.0 that's denying it/dropping it. (firewall family inet, interface unit x family inet filter input/output <x>, etc..)</span></font><div><font face="Calibri"><span style="font-size: 15px;"><br></span></font><div><font face="Calibri"><span style="font-size: 15px;">If the interface is in a VR, you'll need to ping <1.1.1.1> routing-instance <your-VR>; likewise if in a VR, your BGP configuration needs to be in the [routing-instance <vrf> protocols bgp ] stanza.</span></font></div><div><font face="Calibri"><span style="font-size: 15px;"><br></span></font></div><div><font face="Calibri"><span style="font-size: 15px;">JunOS "show arp" is always your friend, to see if you can at least L2-ARP for an address on that network. </span></font><span style="font-size: 15px; font-family: Calibri; ">Posting relevant configlets/stanzas may also help.</span></div><div><font face="Calibri"><span style="font-size: 15px;"><br></span></font></div><div><font face="Calibri"><span style="font-size: 15px;">- Ck.</span></font></div><div><br><div><div>On 23/01/2015, at 9:24 AM, Andrew Cowan <<a href="mailto:andycowan@gmail.com">andycowan@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span style="background-color: rgb(255, 255, 255); "><font face="Calibri,sans-serif"><br class="Apple-interchange-newline">Layer 2 is up, we have done some port mirroring and can see the TCP SYN packets coming in on port 179, but the router isn’t sending anything back. It may be routing rather than BGP because we can’t ping either.</font></span></div></blockquote></div><br></div></div></body></html>