Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

Source-based routing configuration issue

$
0
0

Hi guys, 

I'm not able to configure a source-based routing and it's driving me crazy!

Scenario: I have 2 IPSec tunnels, st0.1 and st0.2, the remote local address on both ends is the same, 10.70.78.0/23

I want to make the SRX to route the packets based on the source addess, so:

 

 - Traffic coming from 10.210.241.0/24 should be routed to st0.1

- Traffic coming from 10.210.225.0/24 should be routed to st0.2

 

The physical interface on my SRX receiving the traffic is reth0. 

 

This is the current configuration :

## INTERFACE reth0 config:

reth0 {
    redundant-ether-options {
        redundancy-group 1;
    }
    unit 0 {
        family inet {
            filter {
                input TEST_SRC_Routing;
            }
            address 10.210.225.190/28;
        }
    }

## FILTER configuration:

 

{primary:node1}[edit firewall]
root@FIREWALL# show 
filter TEST_SRC_Routing {
    term t1 {
        from {
            source-address {
                10.210.241.0/24;
            }
        }
        then {
            routing-instance Test_STG_RoutingInstance;
        }
    }
    term t2 {
        from {
            source-address {
                10.210.225.0/24;
            }
        }
        then {
            routing-instance Test_PROD_RoutingInstance;
        }
    }
}
filter other {
    term default {
        then accept;
    }
}

## Routing Instances configuration:

 

{primary:node1}[edit routing-instances]
root@FIREWALL# show 
Test_PROD_RoutingInstance {
    instance-type forwarding;
    routing-options {
        static {
            route 0.0.0.0/0 next-hop st0.2;
        }
    }
}
Test_STG_RoutingInstance {
    instance-type forwarding;
    routing-options {
        static {
            route 0.0.0.0/0 next-hop st0.1;
        }
    }
}

## Finally, the rib-options:

{primary:node1}[edit routing-options]
root@FIREWALL# show
interface-routes {
rib-group inet rib_group_test;
}
static {
route 10.234.18.0/23 next-hop 10.101.1.254;
route 0.0.0.0/0 next-hop 85.159.122.1;
route 192.168.254.0/24 next-hop 10.101.1.254;
}
rib-groups {
rib_group_Test {
import-rib [ inet.0 Test_PROD_RoutingInstance.inet.0 Test_STG_RoutingInstance.inet.0 ];
}
}

Any help?

 

Thanks!!!

 


Viewing all articles
Browse latest Browse all 3959

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>