i am replacing a Juniper SSG5 with Screenos against a SRX100 with Junos (12.1X44-D35.5).
I am replacing a virtual router configuration that Looks like this:
+--------------------+
192.168.0.1/24 --------(fe-0/0/2)| trust-vr |
(Trust zone network) | routing-instance |
+--------------------+
|
|
|
|
+---------------------+
pppoe dynamic ip--------(fe-0/0/0)| untrust-vr |
(Untrust zone network) | routing-instance |
+---------------------+
I found a Juniper KB that explains exactly this at http://kb.juniper.net/InfoCenter/index?page=content&id=KB22053
In ScreenOS it is possible to Point static routes inside a VR to another VR (In this example: Inside trust-vr - Target 0.0.0.0/0 - next hop - untrust vr)
According to the Juniper KB with Junos they configure a Frame realy (virtual Interface) on both Virtual Routers.
This Approach has 2 downsides in my opinion:
I Need to configure IP Adresses for the Virtual Routers (okay i could live with that) but more important: The configuration is three times larger (more lines) than with ScreenOS and thus also more complex to troubleshoot.
Is there no "easy way" to just set a Virtual Router as a next-hop in JunOS as it was possible in ScreenOS?