[j-nsp] filter-based forwarding

Paul Goyette pgoyette at juniper.net
Wed Mar 11 14:59:14 EDT 2009


Looks obvious - there's always a default term at the end
of a firewall filter to reject anything that gets that
far.

So try adding a 3rd term:

>     filter classify-customers {
>         term isp1-customers {
>             from {
>                 source-address {
>                         10.1.1.0/24;
>                                         }
>                     }
>                 then {
>                         routing-instance instance-1;
>                         }
>                     }
>         term isp2-customers {
>                 from {
>                     source-address 
>                             {10.2.1.0/24;
>                             }
>                 then {
>                         routing-instance instance-2;
>                         }
>                             }

          term everything-else {
                  then accept;
          }

>     } *END of filter*


More information about the juniper-nsp mailing list