Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
To complete the configuration, you must also create a routing table group that adds
interface routes to the following routing instances:
• Routing instance named in the action
• Default routing table inet.0
You create a routing table group to resolve the routes installed in the routing instance to
directly connected next hops on that interface. For more information on routing table
groups and interface routes, see the Junos OS Routing Protocols Configuration Guide.
Examples: Configuring Filter-Based Forwarding
Configure a filter to direct traffic to ISP1 or ISP2 based on source address matching:
[edit firewall]
family inet {
filter classify-customers {
term isp1-customers {
from {
source-address 10.1.1.0/24;
source-address 10.1.2.0/24;
}
then {
routing-instance isp1-route-table;
}
}
term isp2-customers {
from {
source-address 10.2.1.0/24;
source-address 10.2.2.0/24;
}
then {
routing-instance isp2-route-table;
}
}
term default {
then {
accept;
}
}
}
}
Configure a filter-based forwarding (FBF) filter for family inet6:
[edit]
firewall {
family inet6 {
filter ftf_fbf {
term 0 {
from {
source-address {
::10.34.1.0/120;
}
}
270
Copyright © 2010, Juniper Networks, Inc.