Day 16 - 设定 PBR

我们今天要来设定 PBR，我们以 Juniper MX 为例

首先，我们要先决定一个 routing-instance，可以把他当作一个独立的路由表

set routing-instance PBR-WARP instance-type forwarding
set routing-instance PBR-WARP routing-options static route 0.0.0.0/0 next-hop x.x.x.

接着，设定 RIB Group 及路由策略

set routing-options rib-group INT-ROUTES import-rib [ inet.0 PBR-WARP.inet.0 ]
set routing-options interface-routes rib-group inet INT-ROUTES

最後设定路由规则

set firewall family inet filter PBR-WARP term 1 from source-address y.y.y.y/z
set firewall family inet filter PBR-WARP term 1 then routing-instance PBR-WARP-RI

再到网卡介面设定 filter

unit 7 {                        
            vlan-id 700;                
            family inet {               
                rpf-check fail-filter rpf-exception;
                filter {                
                    input PBR-WARP;     
                }                       
                address 172.16.0.254/24;
            }                           
        }

完成！