After the firewall filter and interfaces are ready, create a VPN routing and forwarding (VRF) instance. The filtered traffic enters the VRF instance and is shared only between the input interfaces and the monitoring services output interfaces. In this case, a group of four monitoring services interfaces is used as the next hop.
- [edit]
- routing-instances {
-
- monitoring-vrf {
- instance-type vrf;
- interface so-0/0/0.0;
- interface so-0/1/0.0;
- interface mo-4/0/0.1;
- interface mo-4/1/0.1;
- interface mo-4/2/0.1;
- route-distinguisher 69:1;
- vrf-import monitoring-vrf-import;
- vrf-export monitoring-vrf-export;
-
- routing-options {
-
- static {
- route 0.0.0.0/0 next-hop [mo-4/0/0.1 mo-4/1/0.1 mo-4/2/0.1];
- }
- }
- }
- }