Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: export network between routing instances

$
0
0

Yes, your policy chain has three policies.

 

APN03_public SWu_Route SES_Ruta

 

So the final chain looks like this:

 

 

set policy-options policy-statement APN03_public term 1 from instance Trust-vr
set policy-options policy-statement APN03_public term 1 from protocol ospf
set policy-options policy-statement APN03_public term 1 from route-filter 201.225.230.0/24 exact
set policy-options policy-statement APN03_public term 1 then accept

set policy-options policy-statement SWu_Route term 1 from instance Trust-vr
set policy-options policy-statement SWu_Route term 1 from protocol static
set policy-options policy-statement SWu_Route term 1 from route-filter 192.168.166.26/32 exact
set policy-options policy-statement SWu_Route term 1 then accept
set policy-options policy-statement SWu_Route term 2 then reject

set policy-options policy-statement SES_Ruta term 1 from instance Trust-vr
set policy-options policy-statement SES_Ruta term 1 from protocol direct
set policy-options policy-statement SES_Ruta term 1 from route-filter 192.168.27.64/28 exact
set policy-options policy-statement SES_Ruta term 1 then accept
set policy-options policy-statement SES_Ruta term 2 then reject

 

The bolded term in SWu_Route will need to be removed

But you will need to look at all the other uses of this policy to see if you need a final reject term added

 

the more universal policy chain would eliminate the final reject term from ALL policies then create a "reject" only policy that you add as the LAST policy then in every chain.

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>