SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Route from vrf

     
    Posted 11-19-2015 03:40
    Hi all --

    I need to access a direct route in a virtual router instance from the default instance. Is this possible? The route does not appear even though I have set interface-routes. Is this possible?

    --Paul


  • 2.  RE: Route from vrf

     
    Posted 11-19-2015 03:47

    ideally we should be able to share the routes between instances. Can you share your config



  • 3.  RE: Route from vrf

     
    Posted 11-19-2015 04:15

    Thanks. This is a condensed config:

     

     

    interfaces {
        ge-0/0/2 {
            unit 0 {
                family inet {
                    address 10.15.128.249/31;
                }
            }
        }
        ge-0/0/3 {
            gigether-options {
                redundant-parent reth1;
            }
        }
        ge-5/0/3 {
            gigether-options {
                redundant-parent reth1;
            }
        }
        fab0 {
            fabric-options {
                member-interfaces {
                    ge-0/0/6;
                }
            }
        }
        fab1 {
            fabric-options {
                member-interfaces {
                    ge-5/0/6;
                }
            }
        }
        reth1 {
            redundant-ether-options {
                redundancy-group 1;
            }
            unit 0 {
                description "To AT&T";
                family inet {
                    address 32.60.57.226/28;
                }
            }
        }
        swfab0 {
            fabric-options {
                member-interfaces {
                    ge-0/0/7;
                }
            }
        }
        swfab1 {
            fabric-options {
                member-interfaces {
                    ge-5/0/7;
                }
            }
        }
        vlan {
            unit 681 {
                family inet {
                    address 10.97.112.1/28;
                }
            }
        }
    }
    routing-options {
        interface-routes {
            rib-group inet t-group;
        }
        rib-groups {
            t-group {
                import-rib [ inet.0 ISP-1.inet.0 ];
            }
        }
    }
    routing-instances {
        ISP-1 {
            instance-type virtual-router;
            interface reth1.0;
            routing-options {
                static {
                    route 0.0.0.0/0 next-hop 32.60.57.225;
                }
            }
        }
    }
    vlans {
        appliances {
            vlan-id 681;
            l3-interface vlan.681;
        }
    }

    If we show route, I can see the direct/local interface route from RVI vlan.681 (10.97.112.0/28) from within ISP-1 routing instance however I cannot see the direct/local interface route from reth1 (32.60.57.224/28) from within the default routing instance.

     

     

    inet.0: 13 destinations, 15 routes (13 active, 0 holddown, 0 hidden)
    + = Active Route, - = Last Active, * = Both
    
    10.0.0.0/8         *[BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.0.128/32     *[BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.4.0/24       *[BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.128.0/31     *[BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.128.12/30    *[BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.128.16/30    *[BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.128.246/31   *[Direct/0] 3d 03:15:27
                        > via ge-5/0/2.0    
                        [BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.128.247/32   *[Local/0] 3d 03:15:35
                          Local via ge-5/0/2.0
    10.15.128.248/31   *[Direct/0] 3d 03:15:19
                        > via ge-0/0/2.0
                        [BGP/170] 1d 17:13:36, localpref 210
                          AS path: 65500 I
                        > to 10.15.128.246 via ge-5/0/2.0
    10.15.128.249/32   *[Local/0] 3d 03:15:32
                          Local via ge-0/0/2.0
    10.97.112.0/28     *[Direct/0] 3d 03:14:39
                        > via vlan.681
    10.97.112.1/32     *[Local/0] 3d 03:14:40
                          Local via vlan.681
    10.192.12.0/22     *[Static/5] 01:20:09
                        > to 10.97.112.2 via vlan.681
    
    ISP-1.inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
    + = Active Route, - = Last Active, * = Both
    
    0.0.0.0/0          *[Static/5] 3d 02:17:15
                        > to 32.60.57.225 via reth1.0
    10.15.128.246/31   *[Direct/0] 3d 03:15:27
                        > via ge-5/0/2.0
    10.15.128.247/32   *[Local/0] 3d 03:15:27
                          Local via ge-5/0/2.0
    10.15.128.248/31   *[Direct/0] 3d 03:15:19
                        > via ge-0/0/2.0
    10.15.128.249/32   *[Local/0] 3d 03:15:19
                          Local via ge-0/0/2.0
    10.97.112.0/28     *[Direct/0] 3d 03:14:39
                        > via vlan.681
    10.97.112.1/32     *[Local/0] 3d 03:14:39
                          Local via vlan.681
    32.60.57.224/28    *[Direct/0] 3d 02:17:15
                        > via reth1.0
    32.60.57.226/32    *[Local/0] 3d 03:15:54
                          Local via reth1.0

     

     



  • 4.  RE: Route from vrf
    Best Answer

     
    Posted 11-19-2015 05:19

    to get the routes from Routing Instance you need to call the rib group under routing instance. Please add below config and check the routes,

     

    set routing-instances ISP-1 routing-options interface-routes rib-group inet t-group

    commit

     

    Below KB can be helpful

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB19787&actp=RSS&smlogin=true

     

     



  • 5.  RE: Route from vrf

     
    Posted 11-19-2015 20:20

    Many thanks Suraj, this was exactly what I needed.

     

    --Paul