Re: GRE tunnel implementation to Zscaler using multi tunnels and failover between primary and secondary gateway - (gre tunnel loadbalancing and failover)

Hi Alexander

Thanks for your reply. Here the routing table on traffic_tunnel.inet.0.

user@junipersrx1500> show route table traffic_tunnel.inet.0

traffic_tunnel.inet.0: 23 destinations, 26 routes (23 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

144.155.100.16/28 *[Direct/0] 36w5d 22:26:40
> via reth0.2613
[Direct/0] 36w5d 22:26:40
> via reth0.2613
[Direct/0] 36w5d 22:26:40
> via reth0.2613
[Direct/0] 36w5d 22:26:40
> via reth0.2613
144.155.100.20/32 *[Local/0] 36w5d 22:26:40
Local via reth0.2613
144.155.100.21/32 *[Local/0] 36w5d 22:26:40
Local via reth0.2613
144.155.100.22/32 *[Local/0] 36w5d 22:26:40
Local via reth0.2613
144.155.100.23/32 *[Local/0] 36w5d 22:26:40
Local via reth0.2613
165.225.100.0/22 *[Static/200] 13w0d 17:31:37
via gr-0/0/0.2
via gr-0/0/0.4
via gr-0/0/0.6
> via gr-0/0/0.0
172.17.21.224/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.3
172.17.21.225/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.3
172.17.21.228/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.2
172.17.21.229/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.2
172.17.81.96/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.1
172.17.81.97/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.1
172.17.81.100/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.0
172.17.81.101/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.0
172.17.87.96/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.5
172.17.87.97/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.5
172.17.87.100/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.4
172.17.87.101/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.4
172.17.87.104/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.7
172.17.87.105/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.7
172.17.87.108/30 *[Direct/0] 36w5d 22:26:40
> via gr-0/0/0.6
172.17.87.109/32 *[Local/0] 36w5d 22:26:40
Local via gr-0/0/0.6
185.46.100.0/23 *[Static/5] 12w5d 16:31:20
> via gr-0/0/0.3
via gr-0/0/0.5
via gr-0/0/0.7
via gr-0/0/0.1

How did you mean that the primary route is typically defined with next-hop and not with qualified next-hop?
Sorry to ask you that, but we implemented the GRE as Zscaler told us to do. Strange is that I was more or less thinking the same like you.

BTW: we implemented in the LAB an test environment using 4 tunnel (two primary and two secondary) and using the last implementation setup they explain in https://help.zscaler.com/zia/gre-configuration-example-juniper-srx we also set a tunnel monitor. But the issue stays the same as before...

Thanks in advance 

BR Patrick