Not sure about Juniper but on Cisco PBR does not apply to CPU punted
packets.
So, in most PBR environments you will not be able to reach interfaces
routed in via PBR.
PBR is often counter-intuitive to trouble shoot because it (locally) breaks
most ICMP features.
This may be the expected behavior
Our network Topology as this :
http://forums.juniper.net/t5/image/serverpage/image-id/12913i3A1C52D8896D0604/image-size/original?v=mpbl-1&px=-1
We have an MX80 router which has connection on ae0 to our isp
root@mx80-core# show interfaces ae0
aggregated-ether-options {
minimum-links 1;
l
Hi Bikash,
I addition to everything, you also have to keep in mind that SRX is a
stateful device and performs a reverse route lookup when establishing a new
session. Unfortunately you can't enable something like "use the iface and
mac address from where the packet came" for traffic in backward dir
I'm not sure that this is the only issue, but something I just spotted
under pbr_fe-0/0/6_adsl:
route 0.0.0.0/24
I would have thought that if it didnt match a route that instance, it
would have been dropped. If that is the case, then something else is
going wrong beforehand and the traffic isn't h
originated from
10.139.1.167/32.
Regards,
Bikash
From: Joe Goldberg [mailto:joe.goldb...@falconstor.com]
Sent: बिहीवार, सेप्टेम्बर 30, 2010 7:55 PM
To: Bikash Bhattarai
Cc: juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] Policy based routing on SRX 210
I'm not exactly sure
I'm not exactly sure what you are trying to get this config to do, but at
the very least you need to apply the firewall rule for the PBR to the
relevant interface,
set interface x unit 0 family inet filter input trust-adsl
Joe
On Thu, Sep 30, 2010 at 5:32 AM, Bikash Bhattarai wrote:
> Dear al
This config is doing exactly what you configured it to do. That's how
computers work. Did you want it to do something else? If so, you might
want to tell us what you think it should be doing that it isn't.
On Thu, 30 Sep 2010, Bikash Bhattarai wrote:
Dear all,
My PBR configuration is be
Dear all,
My PBR configuration is below. I have configured everything as suggested in
juniper's documentation. But it's not working as desired. Please help me out
to sort out the issue.
ge-0/0/0 {
unit 0 {
description HO-LAN;
family inet {
Hi list,
I could need a little help with the following setup since my Juniper
experience is rather limited yet because we are going to migrate our
network to juniper within the next months.
Here is what I want to setup:
* There is 3 full-feeds: A, B and C
* Another upstream D with just DeCIX p
9 matches
Mail list logo
