CloudLabBox
Try the free demo

JNCIA-Junos lab 10 of 15

Routing policy and route filters

Control exactly which routes OSPF advertises and installs. You see what the default policies do, export the depot's customer routes with a precise route filter, keep the guest network private, chain policies, and stop HQ installing a partner network while it stays in the OSPF database.

Run this lab

It needs Standard: its 3 nodes are set to 12 vCPU and 15,360 MB in total.

In your workspace: Shared, then JNCIA-Junos JN0-106 guided labs, then 10 - Routing policy and route filters

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 12 vCPU and 15,360 MB together. Every lab plan includes every guided lab.

Level
Intermediate
Time
About 60 minutes
Nodes need
12 vCPU, 15,360 MB
Smallest plan
Standard

The scenario

OSPF is running between HQ, WH and DEPOT. DEPOT also has static routes to networks behind other routers on the depot LAN:

PrefixNext hopWhat it isRule
10.40.0.0/24, 10.40.1.0/24, 10.40.2.0/2410.4.0.254Customer sitesAdvertise to everyone, as OSPF external type 1 with metric 50
10.40.3.0/2510.4.0.254A customer test subnetNever advertise: only /24s from 10.40.0.0/16 go out
10.41.0.0/1610.4.0.253Partner networkAdvertise (the warehouse needs it), but HQ must not install it
192.168.50.0/2410.4.0.250Depot guest Wi-FiNever advertise

What you’ll practise

  • Explain the default import and export policies of OSPF
  • Write policy statements with terms, from and then, and apply them as import or export policies
  • Use route-filter match types: exact, orlonger, longer, upto, prefix-length-range and through
  • Predict how a policy chain is evaluated, including the protocol's default action
  • Show the different effects of export and import policy on the database and the routing table
  • Test a policy before applying it with test policy

The tasks

  1. What the default policies do
  2. Your first export policy
  3. A policy chain
  4. Import policy: in the database, not in the table
  5. Practise the match types

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Routing policy and route filters3 nodes and 3 networks, 6 links. Every link is listed as text below the diagram.HQWHDEPOTHQ-LANWH-LANDEPOT-LANge-0/0/2ge-0/0/2ge-0/0/2ge-0/0/0ge-0/0/0ge-0/0/1ge-0/0/0ge-0/0/1ge-0/0/1
3 nodes and 3 networks, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • HQ ge-0/0/0 to DEPOT ge-0/0/0
  • HQ ge-0/0/1 to WH ge-0/0/0
  • WH ge-0/0/1 to DEPOT ge-0/0/1
  • HQ ge-0/0/2 to HQ-LAN (network)
  • WH ge-0/0/2 to WH-LAN (network)
  • DEPOT ge-0/0/2 to DEPOT-LAN (network)
Nodes in Routing policy and route filters, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
HQJuniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB
WHJuniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB
DEPOTJuniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder JNCIA-Junos JN0-106 guided labs.

  3. Open 10 - Routing policy and route filters and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More JNCIA-Junos labs

All JNCIA-Junos labs

Related labs in other courses

CloudLabBox is independent of Juniper Networks. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.