[j-nsp] Routing Engine filtering on EX with VRF

Luca Salvatore luca at digitalocean.com
Tue Mar 22 12:28:09 EDT 2016


Try putting an loopback interface into the vrf e.g lo0.1 and applying the
filer to that.

On Sat, Mar 19, 2016 at 4:02 PM, Raphael Mazelier <raph at futomaki.net> wrote:

>
>
>>
>> On EX, you should be able to protect the RE using a filter on lo0 in the
>> main routing instance (not in the VRF itself).
>> But be aware that this does not work on tha ACX-series (for some strange
>> reason)...
>>
>>
> Yep the firewall filter work for interfaces that are on the main
> routing-instance. But for some reason the filter does not apply on traffic
> coming from interface placed in a vrf to the RE.
>
>
> --
> Raphael Mazelier
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>



-- 
Luca Salvatore
Manager, Network Team | DigitalOcean
Phone: +1 (929) 214-7242


More information about the juniper-nsp mailing list