Re: [j-nsp] Could JUNOS OP Script support generate firewall filter term and added before original one?

2015-12-17 Thread Steve Hulshof
efault-all then accept set apply-groups ADD_DEFAULT_FW On Thu, Dec 17, 2015 at 10:10 AM Steve Hulshof <cer...@gmail.com> wrote: > You can delete the term default-all from metro-access filter and then use > groups to add the term at the end like this: > > set groups ADD_DEFAULT

Re: [j-nsp] Could JUNOS OP Script support generate firewall filter term and added before original one?

2015-12-17 Thread Steve Hulshof
You can delete the term default-all from metro-access filter and then use groups to add the term at the end like this: set groups ADD_DEFAULT_FW firewall family inet filter metro-access default-all all then accept set apply-groups ADD_DEFAULT_FW This will add your default term to the end of the

Re: [j-nsp] move routes from VRF to inet.0

2014-02-07 Thread Steve Hulshof
Tobias, You can use a Logical Tunnel (LT) interface on the PE to interconnect your VRF with inet.0 and exchange routes between each of them using BGP. Config example to setup LT interface with VR routing-instance but this will work with VRF as well: