Hi All,

I have a requirement for performing Filter-based Forwarding on traffic that is 
ingressing via a routing-instance (instance-type virtual-router):

show routing-options:

interface-routes {
    rib-group inet FBF-PBR;
}

rib-groups {
    FBF-PBR {
        import-rib [ CUSTOMER-A.inet.0 FBF-PBR.inet.0 ];
    }
}

Problem I have is that I can't seem to commit without including inet.0 in the 
rib-group:

root@srx240-lab# commit check 
[edit routing-options interface-routes]
  'rib-group'
    FBF-PBR: primary rib for instance master was not found in ribgroup 
configuration.
error: configuration check-out failed

Putting inet.0 in the rib-group isn't desirable, as it exposes direct routes 
into the RI which I'm trying to hide in the first place.  is there a 
better/different way to be doing this?

Cheers,

Ben
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to