Routing Policy and Firewall Filters
-
New options for the show route command (QFX5100VC, QFX5110, QFX5110-VC, QFX5110-VCF, QFX5120-32C, QFX5120-48T, QFX5120-48T-VC, QFX5120-48Y, QFX5120-48Y-VC, QFX5120-48YM, QFX5200, and QFX5210)—We’ve introduced enhancements to the show route command to enable network operators understand and troubleshoot routing tables more easily. Use the
prefix-length-distributionoption to display counts of prefix lengths across routing tables for each instance. You can run theshow route destination covering-subnetscommand to walk up the radix tree and list all routes covering a destination. These options provide deeper insight for troubleshooting and optimize routing behavior.[See show route.]
-
Apply firewall filters to loopback address logical interfaces on a per VRF basis (QFX5110, QFX5120-32C, QFX5120-48T, QFX5120-48Y, and QFX5120-48YM)—By default, loopback firewall filters apply only to lo0.0, which is global and applicable to all control traffic entering the routing engine, regardless of VRF instances. Use the
loopback-firewall-per-vrfconfiguration statement to apply firewall filters to loopback address logical interfaces on a per VRF basis.[See loopback-firewall-per-vrf.]