juniper@R2# show routing-options | display set set routing-options interface-routes rib-group inet PBR set routing-options rib-groups PBR import-rib inet.0 set routing-options rib-groups PBR import-rib VR.inet.0 set routing-options rib-groups PBR import-rib VPN.inet.0 set routing-options rib-groups PBR import-rib VAS.inet.0 [edit] juniper@R2# show | display set | no-more set version 9.5R4.3 set system host-name R2 set system time-zone Asia/Hong_Kong set system root-authentication encrypted-password "$1$TE3ooCIs$UkMO9cjp4Kn1eK8aK1piC." set system name-server 8.8.8.8 set system login user juniper uid 2003 set system login user juniper class super-user set system login user juniper authentication encrypted-password "$1$PpNFvvzR$y9rBbLGjRRs82mQgXDXYT1" set system services ftp set system services ssh set system services telnet set system services web-management http set system syslog file messages archive set interfaces ge-0/0/0 unit 0 family inet filter input PBR set interfaces ge-0/0/0 unit 0 family inet address 12.1.1.2/24 set interfaces ge-0/0/2 vlan-tagging set interfaces ge-0/0/2 unit 1 vlan-id 21 set interfaces ge-0/0/2 unit 1 family inet address 21.21.21.21/24 set interfaces ge-0/0/2 unit 2 vlan-id 22 set interfaces ge-0/0/2 unit 2 family inet address 22.22.22.22/24 set interfaces ge-0/0/2 unit 3 vlan-id 23 set interfaces ge-0/0/2 unit 3 family inet address 23.23.23.23/24 set interfaces ge-0/0/3 unit 0 family inet address 192.168.128.145/24 set routing-options interface-routes rib-group inet PBR set routing-options rib-groups PBR import-rib inet.0 set routing-options rib-groups PBR import-rib VR.inet.0 set routing-options rib-groups PBR import-rib VPN.inet.0 set routing-options rib-groups PBR import-rib VAS.inet.0 set policy-options policy-statement OSPF term 1 from instance VR set policy-options policy-statement OSPF term 1 from protocol static set policy-options policy-statement OSPF term 1 from route-filter 1.1.1.1/32 exact set policy-options policy-statement OSPF term 1 then metric 1111 set policy-options policy-statement OSPF term 1 then external type 2 set policy-options policy-statement OSPF term 1 then accept set policy-options policy-statement OSPF term 2 from instance VR set policy-options policy-statement OSPF term 2 from protocol static set policy-options policy-statement OSPF term 2 from route-filter 2.2.2.2/32 exact set policy-options policy-statement OSPF term 2 then metric 444 set policy-options policy-statement OSPF term 2 then external type 1 set policy-options policy-statement OSPF term 2 then accept set policy-options policy-statement OSPF term Other from protocol static set policy-options policy-statement OSPF term Other from route-filter 0.0.0.0/0 exact set policy-options policy-statement OSPF term Other then metric 100 set policy-options policy-statement OSPF term Other then accept set security forwarding-options family mpls mode packet-based set firewall family inet filter PBR term VPN from destination-address 192.168.55.1/32 set firewall family inet filter PBR term VPN from destination-address 69.17.117.207/32 set firewall family inet filter PBR term VPN from destination-address 203.186.52.24/32 set firewall family inet filter PBR term VPN then routing-instance VPN set firewall family inet filter PBR term VAS from destination-address 192.168.62.180/32 set firewall family inet filter PBR term VAS from destination-address 192.168.62.172/32 set firewall family inet filter PBR term VAS from destination-address 192.168.151.250/32 set firewall family inet filter PBR term VAS from protocol tcp set firewall family inet filter PBR term VAS from destination-port http set firewall family inet filter PBR term VAS then routing-instance VAS set firewall family inet filter PBR term VAS-2 from destination-address 192.168.58.53/32 set firewall family inet filter PBR term VAS-2 from destination-address 192.168.58.111/32 set firewall family inet filter PBR term VAS-2 then routing-instance VAS set firewall family inet filter PBR term OTHER then accept set routing-instances VAS instance-type forwarding set routing-instances VAS routing-options static route 0.0.0.0/0 qualified-next-hop 22.22.22.24 set routing-instances VAS routing-options static route 192.168.1.1/32 next-hop 22.22.22.24 set routing-instances VPN instance-type forwarding set routing-instances VPN routing-options static route 0.0.0.0/0 qualified-next-hop 21.21.21.24 set routing-instances VR instance-type virtual-router set routing-instances VR interface ge-0/0/0.0 set routing-instances VR interface ge-0/0/2.1 set routing-instances VR interface ge-0/0/2.2 set routing-instances VR interface ge-0/0/2.3 set routing-instances VR routing-options static route 1.1.1.1/32 next-hop 23.23.23.24 set routing-instances VR routing-options static route 2.2.2.2/32 next-hop 23.23.23.24 set routing-instances VR routing-options static route 0.0.0.0/0 next-hop 23.23.23.24 set routing-instances VR protocols ospf export OSPF set routing-instances VR protocols ospf area 0.0.0.0 interface ge-0/0/0.0 interface-type p2p [edit] juniper@R2# commit commit complete [edit] juniper@R2# run show route inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 192.168.128.0/24 *[Direct/0] 6d 00:54:18 > via ge-0/0/3.0 192.168.128.145/32 *[Local/0] 6d 00:54:18 Local via ge-0/0/3.0 VPN.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 192.168.128.0/24 *[Direct/0] 00:00:08 > via ge-0/0/3.0 192.168.128.145/32 *[Local/0] 00:00:08 Local via ge-0/0/3.0 VAS.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 192.168.128.0/24 *[Direct/0] 00:00:08 > via ge-0/0/3.0 192.168.128.145/32 *[Local/0] 00:00:08 Local via ge-0/0/3.0 VR.inet.0: 14 destinations, 14 routes (14 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 0.0.0.0/0 *[Static/5] 00:00:07 > to 23.23.23.24 via ge-0/0/2.3 1.1.1.1/32 *[Static/5] 00:00:07 > to 23.23.23.24 via ge-0/0/2.3 2.2.2.2/32 *[Static/5] 00:00:07 > to 23.23.23.24 via ge-0/0/2.3 12.1.1.0/24 *[Direct/0] 00:00:07 > via ge-0/0/0.0 12.1.1.2/32 *[Local/0] 00:00:07 Local via ge-0/0/0.0 21.21.21.0/24 *[Direct/0] 00:00:07 > via ge-0/0/2.1 21.21.21.21/32 *[Local/0] 00:00:07 Local via ge-0/0/2.1 22.22.22.0/24 *[Direct/0] 00:00:07 > via ge-0/0/2.2 22.22.22.22/32 *[Local/0] 00:00:07 Local via ge-0/0/2.2 23.23.23.0/24 *[Direct/0] 00:00:07 > via ge-0/0/2.3 23.23.23.23/32 *[Local/0] 00:00:07 Local via ge-0/0/2.3 192.168.128.0/24 *[Direct/0] 00:00:08 > via ge-0/0/3.0 192.168.128.145/32 *[Local/0] 00:00:08 Local via ge-0/0/3.0 224.0.0.5/32 *[OSPF/10] 00:00:08, metric 1 MultiRecv [edit] juniper@R2# show routing-options | display set set routing-options interface-routes rib-group inet PBR set routing-options rib-groups PBR import-rib inet.0 set routing-options rib-groups PBR import-rib VR.inet.0 set routing-options rib-groups PBR import-rib VPN.inet.0 set routing-options rib-groups PBR import-rib VAS.inet.0 [edit] juniper@R2# delete routing-options rib-groups PBR import-rib inet.0 [edit] juniper@R2# show routing-options | display set set routing-options interface-routes rib-group inet PBR set routing-options rib-groups PBR import-rib VR.inet.0 set routing-options rib-groups PBR import-rib VPN.inet.0 set routing-options rib-groups PBR import-rib VAS.inet.0 [edit] juniper@R2# commit [edit routing-options interface-routes] 'rib-group' PBR: primary rib for instance master was not found in ribgroup configuration. error: configuration check-out failed [edit]