Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Example: Configuring ECMP Flow-Based Forwarding

Requirements

No special configuration beyond device initialization is required before configuring this feature.

Overview

This example configures three static ECMP routes on an SRX Series device. Each static route uses a different router to reach the destination server. The interfaces to the routers are assigned to the untrust security zone. This example creates a load-balancing routing policy named load-balancing-policy and applies the policy to all routes exported from the routing table to the forwarding table.

Topology

Figure 1 shows the topology used in this example.

Figure 1: ECMP Routes

Configuration

CLI Quick Configuration

To quickly configure this example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Step-by-Step Procedure

1. Configure interfaces.
   [edit interaces]user@host# set ge-0/0/2 unit 0 family inet address 22.0.39.56/8user@host# set ge-0/0/4 unit 0 family inet address 23.0.39.56/8user@host# set ge-0/0/6 unit 0 family inet address 24.0.39.56/8user@host# set ge-0/0/7 unit 0 family inet address 25.0.39.56/8
2. Create security zones.
   [edit security]user@host# set zones security-zone trust interfaces ge-0/0/2user@host# set zones security-zone untrust interfaces ge-0/0/4user@host# set zones security-zone untrust interfaces ge-0/0/6user@host# set zones security-zone untrust interfaces ge-0/0/7
3. Configure a security policy.
   [edit security policies from-zone trust to-zone untrust]user@host# set policy permit-mail match source-address 22.0.39.56/8user@host# set policy permit-mail match destination-address 26.0.0.0/8user@host# set policy permit-mail match application junos-mailuser@host# set policy permit-mail then permit
4. Configure ECMP routes.
   [edit routing-options]user@host# set static route 26.0.0.0/8 next-hop 23.0.54.111user@host# set static route 26.0.0.0/8 next-hop 24.0.44.101user@host# set static route 26.0.0.0/8 next-hop 25.0.44.106
5. Create a load-balancing routing policy.
   [edit policy-options]user@host# set policy-statement load-balancing-policy then load-balance per-packet
6. Apply the routing policy to all routes exported from the routing table to the forwarding table.
   [edit routing-options]user@host# set forwarding-table export load-balancing-policy

Results

From configuration mode, confirm your configuration by issuing the show interfaces, show security, show policy-options, and show routing-options command. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.

If you are done configuring the device, enter commit from configuration mode.

Verification

Verifying the Forwarding Table

Purpose

Verify that the route information for all ECMP routes appears in the forwarding table.

Action

From operational mode, enter the show route forwarding-table command.

Routing table: default.inet
Internet:
Destination        Type RtRef Next hop           Type Index NhRef Netif
...

26.0.0.0/8         user     0 23.0.54.111        rslv     0     1 ge-0/0/4.0
26.0.0.0/8         user     0 24.0.44.101        rslv     0     1 ge-0/0/6.0
26.0.0.0/8         user     0 25.0.44.106        rslv     0     1 ge-0/0/7.0

...