I'm having trouble getting CBF to work on a J-series 10.0R3 using flow mode.
By default ospf directs traffic to the st0.1 interface. I'd like to use CBF to avoid encrypting ef class traffic. That is, ef should use next-hop interface ge-0/0/0.1 (to 10.1.0.1). However, ef (voip) keeps getting encrypted.
Any pointers would be appreciated.
Cheers
This is my partial config:
version 10.0R3.10;
interfaces {
ge-0/0/0 {
per-unit-scheduler;
vlan-tagging;
unit 1 {
vlan-id 1;
family inet {
address 10.1.0.2/29;
}
}
}
st0 {
unit 1 {
family inet {
mtu 1400;
address 10.2.0.2/29;
}
}
}
}
routing-options {
forwarding-table {
export cbf;
}
}
protocols {
ospf {
area 0.0.0.1 {
nssa;
interface st0.1;
}
}
}
policy-options {
policy-statement cbf {
then cos-next-hop-map voip;
}
}
class-of-service {
forwarding-policy {
next-hop-map voip {
forwarding-class ef {
next-hop ge-0/0/0.1;
}
}
}
forwarding-classes {
queue 0 be;
queue 1 ef;
queue 2 af;
queue 3 nc;
}
}