EVPN-VXLAN: IRB: Filter-based forwarding (FBF)

Devices support the use of firewall filters along with routing instances to specify different routes for IPv4 VXLAN-encapsulated traffic in your EVPN-VXLAN network.

To set up this feature:

1. Create an input filter.
2. Specify one or more of these match criteria: Source or destination IP address, Source or destination Layer 4 port, Time to live (TTL), and/or IP protocol
3. For the action, specify the routing instance to which to send packets. (We also support the accept, count, and discard actions.)
4. Apply the filter to an IRB interface with or without a virtual gateway address or an anycast address

For example:

set firewall family inet filter filter-irb term t1 from source-address 192.168.1.2/32

set firewall family inet filter filter-irb term t1 then count FBF-1-packet-count

set firewall family inet filter filter-irb term t1 then routing-instance FBF-1

set interfaces irb unit 10 family inet filter input filter-irb

When the Juniper Networks switch receives incoming traffic from the specified address on interface irb.10, it counts and then forwards the traffic to the FBF-1 routing table. According to the routing table, the packet is forwarded to the next hop that corresponds to the destination address entry in the table.