ESR-100-ST - сетевой связности

[Genez84]

Добрый день, пытаюсь настроить ESR-100-ST , но ни по проверенному конфигу , ни по дефолтным настройкам с мануала , не могу получить доступность по ICMP и SSH, о BGP само собой при отсутствии первых 2х и речи нет....

голову сломал, не могу понять в чем дело .... версия по 1.0.7-ST.76 (из коробки)

Boot version:
1.0.7-ST.76 (date 05/08/2016 time 17:16:48)
SW version:
1.0.7-ST(KC3) build 73[afe3fa9] (date 27/07/2016 time 19:13:04)
HW version:
1v4



esr: r01.xxxxxxxxx# sh int status
Interface Admin Link MTU MAC address
state state
------------- ----- ----- ------ ------------------
gi1/0/1 Up Up 1500 a8:f9:4b:aa:ec:51
gi1/0/2 Down Down 1500 a8:f9:4b:aa:ec:52
gi1/0/3 Down Down 1500 a8:f9:4b:aa:ec:53
gi1/0/4 Down Down 1500 a8:f9:4b:aa:ec:54
gi1/0/4.100 Down Down 1500 a8:f9:4b:aa:ec:54

YYYY-ZZZ1> show arp interface ge-0/2/1.2348
MAC Address Address Name Interface Flags
a8:f9:4b:aa:ec:51 10.27.45.2 10.27.45.2 ge-0/2/1.2348 none

- пинг отсутствует, но в арп мак маршрутизатора прилетает...

на данный момент конфиг :

hostname r01.xxxxxxxxx

syslog max-files 3
syslog file-size 512
syslog file esr info

username xxxx
password encrypted
exit
username yyyy
password encrypted
exit
username zzzz
password encrypted
privilege 15
exit

vlan 2,100
exit

security zone trusted
exit
security zone untrusted
exit

object-group service telnet
port-range 23
exit
object-group service ssh
port-range 22
exit
object-group service dhcp_server
port-range 67
exit
object-group service dhcp_client
port-range 68
exit
object-group service ntp
port-range 123
exit

router bgp 64xxx
address-family ipv4
router-id xx.xxx.xx.x
network xx.xxx.xx.x/29
neighbor yy.yy.yy.y
remote-as AS_
exit
neighbor zz.zzz.zz.z
remote-as AS_
exit
enable
exit
exit

interface gigabitethernet 1/0/1
security-zone trusted
ip address yy.yy.yy.y/30
wan load-balance nexthop yy.yy.yy.y-1
wan load-balance enable
exit
interface gigabitethernet 1/0/2
security-zone trusted
ip address zz.zzz.zz.z/30
wan load-balance nexthop zz.zzz.zz.z-1
wan load-balance enable
exit
interface gigabitethernet 1/0/3
speed 100M full-duplex
security-zone trusted
ip address xx.xxx.xx.x/29
exit
interface gigabitethernet 1/0/4
security-zone trusted
exit
interface gigabitethernet 1/0/4.100
exit
security zone-pair trusted untrusted
rule 1
action permit
match protocol any
match source-address any
match destination-address any
enable
exit
exit
security zone-pair trusted trusted
rule 1
action permit
match protocol any
match source-address any
match destination-address any
enable
exit
exit
security zone-pair trusted self
rule 1
action permit
match protocol tcp
match source-address any
match destination-address any
match source-port any
match destination-port telnet
enable
exit
rule 10
action permit
match protocol tcp
match source-address any
match destination-address any
match source-port any
match destination-port ssh
enable
exit
rule 20
action permit
match protocol icmp
match source-address any
match destination-address any
enable
exit
rule 30
action permit
match protocol udp
match source-address any
match destination-address any
match source-port dhcp_client
match destination-port dhcp_server
enable
exit
rule 40
action permit
match protocol udp
match source-address any
match destination-address any
match source-port any
match destination-port ntp
enable
exit
exit
security zone-pair untrusted self
rule 1
action permit
match protocol udp
match source-address any
match destination-address any
match source-port dhcp_server
match destination-port dhcp_client
enable
exit
exit


ip route 0.0.0.0/0 wan load-balance rule 1

wan load-balance rule 1
failover
outbound interface gigabitethernet 1/0/1 255
outbound interface gigabitethernet 1/0/2
enable
exit

ip telnet server

ip ssh server

ntp enable
ntp broadcast-client enable

[Genez84]

пардон, нашел проблему, забыл инициализировать и включить пропуск трафика

run csconf_mgr activate