Hi Noah, When you are using FBF, the packet will be dropped if the next-hop is unreachable i.e next-hop interface going down.
You can split up 0.0.0.0/0 routes become 2 subnets 0.0.0.0/1 and 128.0.0.0/1. So you will need 3 static routes in the FBF instance, destination to 0.0.0.0/1 and 128.0.0.0/1 with same next-hop and static route to destination to 0.0.0.0/0 with another next-hop for redundancy purposes. Hope this would help. Rgrds, Nugroho On Sat, Aug 15, 2009 at 3:15 AM, Admin <[email protected]> wrote: > Hi there, > > I am wondering how I can configure JUNOS to provide the proper forwarding > that is necessary for an application I am working on. I am matching source > and destination in a firewall rule and placing specific matching packets in > the FORWARD instance. What if the next-hop no longer is usable I suppose > the packets will be dropped. How can I resort to the inet.0 table if 0/0 in > the routing-instance becomes unusable? I realize there is > qualified-next-hop but that requires a next-hop IP and therefore reduces a > more dynamic next-hop choice. > > Ideas? > > > --- snip --- > > FORWARD { > instance-type forwarding; > routing-options { > static { > route 0.0.0.0/0 { > next-hop 192.168.0.1; > resolve; > } > } > maximum-prefixes 300; > } > } > > --- snip --- > > Cheers, > > Noah > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
