Evil_TTL> show | s

Juniper SRX ECMP

Category:Juniper -> Security

To enable ECMP on Juniper SRX:

set logical-systems <lsys_namepolicy-options policy-statement ECMP then load-balance per-packet
set logical
-systems <lsys_namerouting-options forwarding-table export ECMP
set logical
-systems <lsys_namerouting-instances <routing_instance_nameprotocols bgp group <bgp_group_namemultipath 

Before ECMP:

test@JuniperSRXshow route 1.1.1.0/23 logical-system <lsys_name>

<
routing_instance_name>.inet.095 destinations159 routes (93 active0 holddown5 hidden)
+ = 
Active Route, - = Last Active, * = Both

1.1.1.0
/23     *[BGP/170] 1d 13:39:25localpref 200
                      
AS path64001 Ivalidation-stateunverified
                    
to 10.10.10.2 via gr-0/0/0.1
                    [BGP
/170] 1d 13:39:17localpref 200
                      
AS path64001 Ivalidation-stateunverified
                    
to 10.10.10.6 via gr-0/0/0.2 

After ECMP:

test@JuniperSRXshow route 1.1.1.0/23 logical-system <lsys_name>

<
routing_instance_name>.inet.095 destinations159 routes (93 active0 holddown5 hidden)
+ = 
Active Route, - = Last Active, * = Both

1.1.1.0
/23     *[BGP/170] 1d 13:39:25localpref 200
                      
AS path64001 Ivalidation-stateunverified
                    
to 10.10.10.2 via gr-0/0/0.1
                       to 10.10.10.6 via gr
-0/0/0.2
                    [BGP
/170] 1d 13:39:17localpref 200
                      
AS path64001 Ivalidation-stateunverified
                    
to 10.10.10.6 via gr-0/0/0.2 

 

By privilege15