Establish a VRF Instance for the Monitored Traffic

After the firewall filter and interfaces are ready, create a VPN routing and forwarding (VRF) instance. The filtered traffic enters the VRF instance and is shared only between the input interfaces and the monitoring services output interfaces. In this case, a group of four monitoring services interfaces is used as the next hop.

[edit]

routing-instances {

    monitoring-vrf {

        instance-type vrf; 

        interface so-0/0/0.0; 

        interface so-0/1/0.0; 

        interface mo-4/0/0.1; 

        interface mo-4/1/0.1; 

        interface mo-4/2/0.1; 

        route-distinguisher 69:1; 

        vrf-import monitoring-vrf-import; 

        vrf-export monitoring-vrf-export; 

        routing-options {

            static {

                route 0.0.0.0/0 next-hop [ mo-4/0/0.1 mo-4/1/0.1 mo-4/2/0.1]; 

            } 

        } 

    } 

}