SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  SRX: Multiple VR's, route leaking but no reverse route.

    Posted 12-22-2013 10:00

    Hi


    The other day I made a test setup in my lab. 

     

    I had three routing instances. LAN1, LAN2 and the default inet.0. I wanted to put one VLAN 192.168.0.0/20 into VR LAN1 and another VLAN 192.168.2.0/24 into LAN2.

    My ISP link was attached to inet.0. I made a static default route in both routing instances pointing towards inet.0 as next-table.

    I was able to browse the internet from both VLAN's without having reverse routes in my inet.0 - so no routes for neither 192.168.0.0/20 or 192.168.2.0/24.


    This was what I wanted to accomplish. Address overlap in two VLAN's by means of multiple VR's.

     

    Does JunOS like ScreenOS in some way provide for reverse routing by looking at the session? I made no use of address translation between neither LAN1 nor LAN2 towards inet.0.

     

    Can anyone explain this behaviour?



  • 2.  RE: SRX: Multiple VR's, route leaking but no reverse route.
    Best Answer

     
    Posted 12-22-2013 19:47

    Yes, the session on the device would take care of traffic in reverse direction.

     

    -Sarab



  • 3.  RE: SRX: Multiple VR's, route leaking but no reverse route.

    Posted 12-23-2013 00:49

    Thanks for the reply. Just out of curiosity; is it possible to disable the function of using the session for reverse routing?



  • 4.  RE: SRX: Multiple VR's, route leaking but no reverse route.

     
    Posted 12-23-2013 02:04
    AFAIK that may not be possible.


  • 5.  RE: SRX: Multiple VR's, route leaking but no reverse route.

    Posted 12-23-2013 02:34

    Ok. Thanks. I found this document, which was also very helpful for me.

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB21256&smlogin=true