Description

In case of a route based VPN which have traffic selector configuration, routes learnt via Traffic selector cannot be imported / exported to another routing instance using rib-groups.

Solution

Workaround:

  1. Configure static route under the routing-instance and import them using rib-groups.
  2. Use policy-options to leak route.  

Example:

set policy-options policy-statement Instance-1 term 1 from instance Test-import
set policy-options policy-statement Instance-1 term 1 from protocol static
set policy-options policy-statement Instance-1 term 1 from route-filter x.x.x.x/x exact
set policy-options policy-statement Instance-1 term 1 then accept
set policy-options policy-statement Instance-1 term 2 then reject
set routing-instances Instance-2 routing-options instance-import Test-import