[j-nsp] JunOS equivalent of "vrf source selection"

Phil Mayers p.mayers at imperial.ac.uk
Thu Jan 17 07:29:24 EST 2013


Does "JunOS policy routing" work for selecting traffic on a 
multi-addressed interface into a L3VPN routing instance? That is, can 
you do this:

interfaces {
     ge-0/0/1 {
         unit 0 {
             family inet {
                 filter {
                     input VRF_SELECT;
                 }
                 address some.public.ip.1/24;
                 address 192.168.x.1/24;
             }
         }
     }
}
routing-instances {
     FOO {
         instance-type vrf;

         route-distinguisher x.x.x.x:1;
         vrf-target target:x.x.x.x:1;
     }
}

firewall {
     family inet {
         filter VRF_SELECT {
             term PRIVATE {
                 from {
                     source-address {
                         192.168.x.0/24;
                     }
                 }
                 then {
                     routing-instance FOO;
                 }
             }
             term REST {
                 then accept;
             }
         }
     }
}

What kind of rib-group magic would I need to get 192.168.x.0/24 into the 
FOO "connected" routes, and not into the inet.0 routes?


More information about the juniper-nsp mailing list