Switching

last person joined: 23 hours ago 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.
  • 1.  How should I configure FBF to refer routing-table when next-hop is unreachable (interface down) ?

    Posted 01-21-2011 01:03

    I am newer in junier.
    I need to configured FBF to redirect traffic.
    I know that I can define two or more qualified-next-hop in routing-instances to redirect triffic.
    But if all of the qualified-next-hop is unreachable〈interface down〉, how should I configure that packet forwarding refer the routing-table?
    Because my defult route was advertised from bgp peer, I don't want to define the last qualified-next-hop is bgp peer ip.

    Sorry for my English


    My configuration is follow:

        ge-0/0/6 {
            unit 0 {
                family inet {
                    address 192.168.11.2/24;
                }
            }
        }
        ge-0/0/8 {
            unit 0 {
                family inet {
                    address 192.168.12.2/24;
                }
            }
        }
        ge-0/0/10 {
            unit 0 {
                family inet {
                    address 192.168.13.2/24;
                }      
            }
        }
     
    routing-options {
        interface-routes {
            rib-group inet rib1;
        }
        rib-groups {
            rib1 {
                import-rib [ inet.0 r1.inet.0];
            }
        }
        autonomous-system 1000;
    }

    firewall {
        family inet {
            filter fil {
                term t1 {
                    from {
                        source-address {
                            20.1.30.0/24;
                        }
                    }
                    then {
                        routing-instance r1;
                    }
                }
             
                term default {
                    then accept;
                }
            }          
        }              
    }

    routing-instances {
        r1 {
            instance-type forwarding;
            routing-options {
                static {
                    route 0.0.0.0/0 {
                        qualified-next-hop 192.168.12.1 {
                            preference 100;
                        }
                        qualified-next-hop 192.168.13.1 {
                            preference 150;
                        }
                        qualified-next-hop 192.168.11.1 {
                            preference 200;
                        }
                    }
                }
            }
        }



  • 2.  RE: How should I configure FBF to refer routing-table when next-hop is unreachable (interface down) ?
    Best Answer

    Posted 01-24-2011 00:49

    With FBF the firewall action selects a new routing table for a lookup instead of just a next hop.  This means that based on firewall policy traffic can be moved towards different routing-instances which can accommodate dynamic routing protocols to calculate best path reachability to upstream topologies.

     

    One option would be to skip the rib-groups and use a policy-statement to control which routes are imported into your routing instance.  You can still use the static routes if you like, but you can also import the 0/0 route which you say is being advertised from BGP as well.

     

     

    policy-options {
        policy-statement FBF-import {
            term directs {
                from {
                    instance master;
                    protocol direct;
                }
                then accept;
            }
            term bgp {
                from {
                    instance master;
                    protocol bgp;
                    route-filter 0.0.0.0/0 exact;
                }
                then accept;
            }
    term rest {
    then reject;
    }
    } routing-instances { FBF { instance-type forwarding; routing-options { static { route 0.0.0.0/0 { qualified-next-hop 192.168.12.1 { preference 100; } qualified-next-hop 192.168.13.1 { preference 150; } qualified-next-hop 192.168.11.1 { preference 200; } } } instance-import FBF-import; } } }

     

     



  • 3.  RE: How should I configure FBF to refer routing-table when next-hop is unreachable (interface down) ?

    Posted 02-10-2012 00:52

    Hi,

    For FBF (filter based forwarding/policy based routing), do we actually need to use rib-group?

    Can we use "metric" instead of "preference"?