Labs

 View Only
last person joined: 2 days ago 

Discover how to get the most of Juniper labs and share what you've built.
  • 1.  Test Leaking traffic - instance vrf to inet.0

    Posted 10-13-2022 14:46
    Hi community ,
    I am testing in a lab with a juniper image (juniper VMx).
    I am trying to send traffic through a vrf "tms-nacional" and reinject it to inet.0.
    I managed to take the routes from inet.0 with a rib-group to the vrf "tms-nacional" but for some reason the traffic does not reach the destination.
    A test I did was to create a static route without using rib-group and the traffic arrived at the destination
    But it would have a need at the scalability level that the export of routes be by rib-group
    Topology
    topologyrib-group config
    root@juniper-pe# run show configuration routing-options
    interface-routes {
    rib-group inet inject-routes-to-vrf-tms-nacional;
    }
    rib-groups {
    inject-routes-to-vrf-tms-nacional {
    import-rib [ inet.0 tms-nacional.inet.0 ];
    }
    }

    Config vrf (the static route was configured as a test to check that work, but need that work with the feature rib-group )
    root@juniper-pe# run show configuration routing-instances
    tms-nacional {
    instance-type vrf;
    route-distinguisher 9393:191;
    vrf-target target:9393:191;
    vrf-table-label;
    routing-options {
    static {
    route 181.167.77.1/32 next-hop 181.167.77.1;
    }
    }
    }

    Route direct (export route with rib-group, but not work):
    root@juniper-pe# run show route table tms-nacional.inet.0 protocol direct detail

    tms-nacional.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
    181.167.77.0/24 (1 entry, 1 announced)
    *Direct Preference: 0
    Next hop type: Interface
    Address: 0x9582524
    Next-hop reference count: 3
    Next hop: via ge-0/0/0.0, selected
    State: <Secondary Active Int>
    Local AS: 9393
    Age: 1d 4:02:27
    Validation State: unverified
    Task: IF
    Announcement bits (2): 0-KRT 1-BGP_RT_Background
    AS path: I
    Primary Routing Table inet.0


    Route static

    root@juniper-pe# run show route table tms-nacional.inet.0 protocol static detail

    tms-nacional.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
    181.167.77.1/32 (1 entry, 1 announced)
    *Static Preference: 5
    Next hop type: Router, Next hop index: 587
    Address: 0x940fa24
    Next-hop reference count: 3
    Next hop: 181.167.77.1 via ge-0/0/0.0, selected
    Session Id: 0x26
    State: <Active Int Ext>
    Age: 1:02:06
    Validation State: unverified
    Task: RT
    Announcement bits (2): 0-KRT 1-BGP_RT_Background
    AS path: I

    About this:
    Do you know of a way to view the logs of rejected traffic on Juniper?
    Has anyone done a similar test?
    This test is carried out successfully in Cisco and Huawei, but in Juniper I still can't find a way to pass traffic between the vrf instance to the inet.0

    I will be very grateful if someone knows of a way to pass traffic from a vrf instance to inet.0 or some configuration example
    Thanks!

    Regards






    ------------------------------
    Mauro Baldinelli
    ------------------------------


  • 2.  RE: Test Leaking traffic - instance vrf to inet.0

    Posted 10-14-2022 16:35

    Olá Mauro, 

    Did you try using the next-table  option on your static routes within the RI ?

    Please, look if this works for you:
    https://www.juniper.net/documentation/us/en/software/junos/static-routing/topics/ref/statement/static-edit-routing-options.html 



    ------------------------------
    Lucas Franca
    ------------------------------