I think one of your other import terms then must be rejecing this route. I have the basic configuration working on a lab box.
Configuration:
root@none> show configuration routing-instances Trust-vr { interface fe-0/0/1.0; } Untrust-vr { interface fe-0/0/0.0; routing-options { instance-import SES_Route; } } root@none> show configuration policy-options policy-statement SES_Route { term 1 { from { instance Trust-vr; protocol direct; route-filter 192.168.27.64/28 exact; } then accept; } term 2 { then reject; } }
Result:
Trust-vr.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 192.168.27.64/28 *[Direct/0] 00:03:58 > via fe-0/0/1.0 192.168.27.65/32 *[Local/0] 00:03:58 Local via fe-0/0/1.0 Untrust-vr.inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 192.168.27.64/28 *[Direct/0] 00:00:21 > via fe-0/0/1.0 192.168.128.0/24 *[Direct/0] 00:02:23> via fe-0/0/0.0 192.168.128.14/32 *[Local/0] 00:02:23 Local via fe-0/0/0.0