Description

Customer spoke site (SiteA) has two internet wan links as shown in below diagram. WAN1 has additional hops before breaking out to internet.




LIBO traffic (local brekaout) load balance on both WAN links. Whenever there is an link issue between the ISP1 provider's PE and the router (ISP1_GW) at SITEA-NODE1 location, LIBO traffic is still sent towards ISP1_CPE router . As per CSO design RPM probe and ip-monitoring policy monitors connectivity with the immediate next hop . Due to this traffic will get blackholed at ISP1_GW router when there is a link failure between ISP1_core router and ISP1_GW router.


This article provides the sample stage2 configuration template for rpm probe and ip-monitoring policy for this scenario.

Symptoms

  • Customer onboarded Dual SRX site with 2 internet wan links.
  • One of the internet WAN link has additional hops before breaking out traffic to internet.
  • CSO will not monitor the link failures post immediate next hop router.


Solution

Here is the sample stag2 configuration template that can be used for this scenario. Dynamic variable names can be changed as per the requirement. 

Refer to  KB107992 [juniper.net] fore more details on CLI configuration. 

 

delete groups srx-gwr-site-routing-config-{{ISPNAME}}

delete apply-groups srx-gwr-site-routing-config-{{ISPNAME}}

 

{% if post_config != {} %}

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} target address {{ TARGET_IP }}

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} source-address {{ SOURCE_IP }}

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} routing-instance {{WANVRF}}

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} probe-count 3

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} probe-interval 1

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} test-interval 1

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} thresholds successive-loss 3

set groups srx-gwr-site-routing-config-{{ISPNAME}} services rpm probe lbo-probe-{{WANVRF}}-upstream-{{ISPNAME}} test icmp-{{ISPNAME}} thresholds total-loss 3

 

 

set groups srx-gwr-site-routing-config-{{ISPNAME}} services ip-monitoring policy breakout-policy-{{WANVRF}}-local-INTERNET-{{ISPNAME}} match rpm-probe lbo-probe-WAN_1-upstream-{{ISPNAME}}

set groups srx-gwr-site-routing-config-{{ISPNAME}} services ip-monitoring policy breakout-policy-{{WANVRF}}-local-INTERNET-{{ISPNAME}} then preferred-route routing-instances internet-local-breakout route 0.0.0.0/0 next-hop {{ ISP_IP }} preferred-metric 1

 

set apply-groups srx-gwr-site-routing-config-{{ISPNAME}}

{% endif %}

 

Example Screenshots:

 

 

 

 

Modification History

2026-03-28 : Article Created