SRX Services Gateway
Highlighted
SRX Services Gateway

SRX ECMP per-flow and per-packet

‎05-15-2017 11:31 PM

Hi,

 

I am currently using an active-passive redundant configuration of the srx firewall,

ECMP is in use
 
The configuration is as follows.
=============================================
set routing-options forwarding-table export per-flow
set policy-options policy-statement per-flow then load-balance per-packet
set forwarding-options hash-key family inet layer-3
set forwarding-options hash-key family inet layer-4
=============================================
 
 
I want to know the meaning of this setting.
 
 
Thank you.
1 REPLY 1
Highlighted
SRX Services Gateway

Re: SRX ECMP per-flow and per-packet

‎05-15-2017 11:39 PM
set policy-options policy-statement per-flow then load-balance per-packet ---- This is the load balance policy - Even though it says per-packet SRX will do per-session based load balancing.

set routing-options forwarding-table export per-flow --- You applied/activated the above load balance policy

set forwarding-options hash-key family inet layer-3 ----- These 2 lines used to instruct SRX calculate the hashing based on L3 and L4 header information. The packets with same hash will be forwarded on same interface.
set forwarding-options hash-key family inet layer-4
Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Feedback