========== Router config - Based on Juniper M10i router ========= admin@srbah2-re0# show routing-instances gp-vrf instance-type vrf; interface fe-0/0/0.4; interface ds-0/1/0:1.0; interface vt-0/3/0.2; interface lo0.1; interface fe-0/0/0.5; route-distinguisher 64726:10; vrf-import gp_import; vrf-export gp_export; routing-options { interface-routes { family inet { export { lan; } } } static { route 217.17.247.48/29 next-hop 192.168.35.172; route 217.17.247.224/27 next-hop 192.168.35.172; route 193.188.117.77/32 next-hop 192.168.35.172; route 193.188.117.76/32 next-hop 192.168.35.172; route 82.194.63.0/25 next-hop 192.168.35.172; route 194.6.15.196/32 next-hop 192.168.33.105; } router-id 194.6.13.78; autonomous-system 64726 loops 2; } protocols { bgp { hold-time 180; group GP_Roaming_Partner { ############ inactive ########## type external; hold-time 180; log-updown; import import-bgp-FR; family inet { unicast { rib-group gp-to-isp; } } export GTP_edns_routes; peer-as 64515; neighbor 194.6.13.77; } group GRX_over_IPSec { ######## active ####### type external; multihop; local-address 194.6.15.196; import import-bgp; family inet { unicast { rib-group gp-to-isp; } } export export-bgp-GRX_IPSec; peer-as 64515; neighbor 194.6.15.196; } } } ------------------------- ===== import & export policies ==== admin@srbah2-re0> show configuration policy-options policy-statement import-bgp term a { from { protocol bgp; external; route-filter 217.17.247.48/29 exact; } then reject; } {master} admin@srbah2-re0> show configuration policy-options policy-statement gp_export term a { from protocol [ bgp static ]; then { community add gp-vrf; accept; } } {master} admin@srbah2-re0>