Re: [j-nsp] rib group
It is basically a way to allow two routing tables to share some or all routes without using up extra memory by actually overlapping them and copying those routes into each table that needs them. [j-nsp] rib group David water to: juniper-nsp 04/27/10 12:08 AM Sent by: juniper-nsp-boun...@puck.nether.net All, How does rib-group work in JUNOS? How does the import and export works using rib-groups? -- David W. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] rib-group requirement for master rib
Hi All, I have a requirement for performing Filter-based Forwarding on traffic that is ingressing via a routing-instance (instance-type virtual-router): show routing-options: interface-routes { rib-group inet FBF-PBR; } rib-groups { FBF-PBR { import-rib [ CUSTOMER-A.inet.0 FBF-PBR.inet.0 ]; } } Problem I have is that I can't seem to commit without including inet.0 in the rib-group: root@srx240-lab# commit check [edit routing-options interface-routes] 'rib-group' FBF-PBR: primary rib for instance master was not found in ribgroup configuration. error: configuration check-out failed Putting inet.0 in the rib-group isn't desirable, as it exposes direct routes into the RI which I'm trying to hide in the first place. is there a better/different way to be doing this? Cheers, Ben ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] rib-group requirement for master rib
Configure interface-routes at the [edit routing-instances CUSTOMER-A routing-options] hierarchy rather than the [edit routing-options] hierarchy. Continue to define rib-groups at the [edit routing-options] hierarchy. [edit] root@srx210# show routing-options rib-groups { FBF-PBR { import-rib [ CUSTOMER-A.inet.0 FBF-PBR.inet.0 ]; } } [edit] root@srx210# show routing-instances CUSTOMER-A { instance-type virtual-router; routing-options { interface-routes { rib-group inet FBF-PBR; } } } [edit] root@srx210# commit check configuration check succeeds --Stacy On Nov 28, 2012, at 5:39 PM, Ben Dale bd...@comlinx.com.au wrote: Hi All, I have a requirement for performing Filter-based Forwarding on traffic that is ingressing via a routing-instance (instance-type virtual-router): show routing-options: interface-routes { rib-group inet FBF-PBR; } rib-groups { FBF-PBR { import-rib [ CUSTOMER-A.inet.0 FBF-PBR.inet.0 ]; } } Problem I have is that I can't seem to commit without including inet.0 in the rib-group: root@srx240-lab# commit check [edit routing-options interface-routes] 'rib-group' FBF-PBR: primary rib for instance master was not found in ribgroup configuration. error: configuration check-out failed Putting inet.0 in the rib-group isn't desirable, as it exposes direct routes into the RI which I'm trying to hide in the first place. is there a better/different way to be doing this? Cheers, Ben ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] rib-group requirement for master rib
Perfect - thanks Stacy On 29/11/2012, at 12:00 PM, Stacy W. Smith st...@acm.org wrote: Configure interface-routes at the [edit routing-instances CUSTOMER-A routing-options] hierarchy rather than the [edit routing-options] hierarchy. Continue to define rib-groups at the [edit routing-options] hierarchy. [edit] root@srx210# show routing-options rib-groups { FBF-PBR { import-rib [ CUSTOMER-A.inet.0 FBF-PBR.inet.0 ]; } } [edit] root@srx210# show routing-instances CUSTOMER-A { instance-type virtual-router; routing-options { interface-routes { rib-group inet FBF-PBR; } } } [edit] root@srx210# commit check configuration check succeeds --Stacy On Nov 28, 2012, at 5:39 PM, Ben Dale bd...@comlinx.com.au wrote: Hi All, I have a requirement for performing Filter-based Forwarding on traffic that is ingressing via a routing-instance (instance-type virtual-router): show routing-options: interface-routes { rib-group inet FBF-PBR; } rib-groups { FBF-PBR { import-rib [ CUSTOMER-A.inet.0 FBF-PBR.inet.0 ]; } } Problem I have is that I can't seem to commit without including inet.0 in the rib-group: root@srx240-lab# commit check [edit routing-options interface-routes] 'rib-group' FBF-PBR: primary rib for instance master was not found in ribgroup configuration. error: configuration check-out failed Putting inet.0 in the rib-group isn't desirable, as it exposes direct routes into the RI which I'm trying to hide in the first place. is there a better/different way to be doing this? Cheers, Ben ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] rib group
Let's say that you have the following stanza under your master routing instance: routing-options { interface-routes { rib-group inet if-route; } static { rib-group static-rg; route 0.0.0.0/0 next-hop 30.30.30.13; route 3.3.3.3/32 next-hop 30.30.30.10; route 220.220.220.1/32 discard; } rib-groups { if-route { import-rib [ inet.0 manhattan-alternate.inet.0 ]; } bgp-rg { import-rib [ inet.0 manhattan-alternate.inet.0 ]; } static-rg { import-rib [ inet.0 manhattan-alternate.inet.0 ]; import-policy STATIC-RG-NO-DEFAULT; } ospf-rg { import-rib [ inet.0 manhattan-alternate.inet.0 ]; } } } Take a look at the static-rg rib-group that has an import policy. In this example, I have an import policy that looks like this: l...@cs-m10i# show policy-options policy-statement STATIC-RG-NO-DEFAULT term default-reject { from { route-filter 0.0.0.0/0 exact; } then reject; } term accept { then accept; } This will reject the protocol static 0/0 route from inet.0 when copying to manhattan-alternate.inet.0. Hope this helps to make sense of RIB groups in JUNOS. Kind regards, Truman On 27/04/2010, at 12:02 AM, David water wrote: All, How does rib-group work in JUNOS? How does the import and export works using rib-groups? -- David W. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] rib group
Hi , here is a starting point : http://www.juniper.net/techpubs/software/junos/junos94/swconfig-routing/creating-routing-table-groups.html#id-10439786 Meryem. Date: Tue, 27 Apr 2010 00:02:47 -0400 From: dwater2...@gmail.com To: juniper-nsp@puck.nether.net Subject: [j-nsp] rib group All, How does rib-group work in JUNOS? How does the import and export works using rib-groups? -- David W. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _ Hotmail : une messagerie fiable avec une protection anti-spam performante https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] rib group
All, How does rib-group work in JUNOS? How does the import and export works using rib-groups? -- David W. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] Rib-group
Hi ALL, please can someone help to understand rib-group.. i cN't find a clear document explaining the concept. i'll appreciat ure help. merci/ salutation khalid ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Rib-group
It basically allows two routing tables to share information. In the case of the global routing tables inet.(0-4) it allows you to share their information with a vpn without wasting memory by actually copying the routes into that vpn. For example if you want to give a customer internet access you could create a rib group between his vpn routing instance and inet.0 or wherever the internet routing table is stored. You also have the ability to configure import/export policies. HTH, Keegan Ibariouen Khalid [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07/31/08 07:58 AM To juniper-nsp@puck.nether.net cc Subject [j-nsp] Rib-group Hi ALL, please can someone help to understand rib-group.. i cN't find a clear document explaining the concept. i'll appreciat ure help. merci/ salutation khalid ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp