Hi, thnak you for your reply.
#1
I tried to add separate vlan to routing instance - it didnt helped.
#2
it is routed to ISP2.
There is only one routing instance, for isp2. Services like ipsec vpn works perfectly wtih such setup. But still cant get nat to work
show routing-instances cifra1 { instance-type virtual-router; interface fe-0/0/4.0; routing-options { static { route 0.0.0.0/0 next-hop 212.152.36.217; } } }