Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


routing-instance (Advanced Policy-Based Routing)


Hierarchy Level

[edit security advance-policy-based-routing profile profile-name rule rule-name then]


Specify a specific routing instance to which the device sends the matched packets.

When traffic arrives at the specified zone or interface, it is matched by the advanced policy-based routing (APBR) profile (application profile). The application profile matches applications and application groups and if the matching rule is found, the packets are routed to the routing instance that sends the traffic to a different interface as specified in the next-hop IP address.

The routing instances specify the routing table and the destination to which a packet is forwarded. The following types of routing instances are supported:

  • Forwarding—Use this routing instance type for filter-based forwarding applications.

  • Virtual router—Similar to the forwarding instance type, but used for non-VPN-related applications.



Specify the name of the routing instance.

Required Privilege Level

services—To view this statement in the configuration.

services-control—To add this statement to the configuration.