There is a firewall filter to forward traffic to a forwarding instance:
term 2 {
from {
source-address {
1.1.1.1/32;
}
destination-address {
0.0.0.0/0;
}
protocol tcp;
destination-port [ 80 443 ];
}
then {
routing-instance fwd;
accept
}
show configuration routing-instances
fwd {
instance-type forwarding;
routing-options {
static {
route 0.0.0.0/0 next-hop xxxxx;
}
instance-import xxxxxy;
}
}
For some reason, I can't add security policy to permit this traffic ,
is there any way to skip security policy check for this forwarding instacne + firewall filter in SRX1400/3600?