[j-nsp] filter-based forwarding

Stefan Fouant sfouant at gmail.com
Wed Mar 11 14:58:19 EDT 2009


On Wed, Mar 11, 2009 at 1:49 PM, ying zhang <cynthia_dal at yahoo.ca> wrote:
> Hi list,
> Tried to use source-based forwarding on a M120. I created two OTHER routing instances: instance-1 and instance-2. Then apply a filter on an M120 interface which connected to an upstream router.
>     If I do this:
>     filter classify-customers {
>         term isp1-customers {
>             from {
>                 source-address {
>                         10.1.1.0/24;
>                                         }
>                     }
>                 then {
>                         routing-instance instance-1;
>                         }
>                     }
>         term isp2-customers {
>                 from {
>                     source-address
>                             {10.2.1.0/24;
>                             }
>                 then {
>                         routing-instance instance-2;
>                         }
>                             }
>     } *END of filter*
>     This will break the routing between M120 and its upstream router, but If change the last term to using master routing instance, things work just fine:
>     filter classify-customers {
>         term isp1-customers {
>             from {
>                 source-address {
>                         10.1.1.0/24;
>                                         }
>                     }
>                 then {
>                         routing-instance instance-1;
>                         }
>                     }
>         term isp2-customers {
>                 from {
>                     source-address {
>                             10.2.1.0/24;
>                             }
>                 then {
>                        accept;
>                         }
>                             }
>     } *END of filter*
>
>     Does anyone know why? Checked the document, didn't find a clue. Thanks a lot.
>
>     C.

Can you elaborate a bit more when you say it "breaks" the routing...
do you mean the control plane traffic between the M120 and it's
upstream neighbor is affected, and therefore BGP sessions are no
longer operational?  Or do you imply something else.

-- 
Stefan Fouant

Stay the patient course.
Of little worth is your ire.
The network is down.


More information about the juniper-nsp mailing list