BT Infinity and Juniper SRX Configuration

Question

First time using this community and I have only recently been thrown into the world of Juniper. I bought an SRX210B to use for lab work at home and am trying to get it working with my BT Infinity circuit. The physical link appears up and so does the PPPoE session (from what I can work out) but the logical link is down. Can anyone provide assistance?
interfaces {
ge-0/0/0 {
unit 0 {
encapsulation ppp-over-ether;
ge-0/0/1 {
unit 0 {
description LAB01VMW001;
family ethernet-switching {
port-mode trunk;
vlan {
members [ MGMT DATA VOICE SERVER DMZ ];
native-vlan-id 100;
fe-0/0/2 {
unit 0 {
description LAB01UCM001;
family ethernet-switching {
port-mode trunk;
vlan {
members [ MGMT DATA VOICE DMZ ];
native-vlan-id 100;
fe-0/0/3 {
unit 0 {
family ethernet-switching {
vlan {
members MGMT;
pp0 {
traceoptions {
flag all;
unit 0 {
point-to-point;
ppp-options {
pap {
local-name "[email protected]";
local-password "xxxxxxxxxxxxxxxxxxxxxxx"; ## SECRET-DATA
passive;
pppoe-options {
underlying-interface ge-0/0/0.0;
idle-timeout 0;
auto-reconnect 10;
client;
family inet {
negotiate-address;
vlan {
unit 10 {
family inet {
address 10.10.10.1/24;
unit 20 {
family inet {
address 10.10.20.1/24;
unit 30 {
family inet {
address 10.10.30.1/24;
unit 66 {
family inet {
address 172.16.0.1/24;
unit 99 {
family inet {
address 10.10.99.1/24;
routing-options {
static {
route 0.0.0.0/0 {
next-hop pp0.0;
metric 0;
protocols {
stp;
security {
nat {
source {
rule-set trust-to-untrust {
from zone trust;
to zone untrust;
rule source-nat-rule {
match {
source-address 0.0.0.0/0;
then {
source-nat {
interface;
screen {
ids-option untrust-screen {
icmp {
ping-death;
ip {
source-route-option;
tear-drop;
tcp {
syn-flood {
alarm-threshold 1024;
attack-threshold 200;
source-threshold 1024;
destination-threshold 2048;
timeout 20;
land;
zones {
security-zone trust {
host-inbound-traffic {
system-services {
all;
protocols {
all;
interfaces {
vlan.10;
vlan.99;
vlan.30;
vlan.20;
security-zone untrust {
screen untrust-screen;
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
system-services {
dhcp;
tftp;
pp0.0 {
host-inbound-traffic {
system-services {
all;
policies {
from-zone trust to-zone untrust {
policy trust-to-untrust {
match {
source-address any;
destination-address any;
application any;
then {
permit;
vlans {
DATA {
description DATA;
vlan-id 10;
l3-interface vlan.10;
DMZ {
description DMZ;
vlan-id 66;
l3-interface vlan.66;
HOLE {
description Blackhole;
vlan-id 100;
MGMT {
description MGMT;
vlan-id 99;
l3-interface vlan.99;
SERVER {
description SERVER;
vlan-id 30;
l3-interface vlan.30;
VOICE {
description VOICE;
vlan-id 20;
l3-interface vlan.20;

Answer 1

All sorted by BT engineer. Super fast broadband download and BT vision up and running perfect.