Description

This article explains why a specific Local IP route is displayed as 'Reject' in the routing table.

Symptoms

The following output is observed for the 'reject' route in the routing table:

root@SRX> show route 10.0.0.1
inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.0.0.1/32    *[Local/0] 5w6d 22:32:31
                       Reject


root@SRX> show route 172.16.0.1

inet.0: 379 destinations, 379 routes (378 active, 0 holddown, 1 hidden)
Restart Complete
+ = Active Route, - = Last Active, * = Both
 
172.16.0.1/32  *[Static/1] 22:43:00
                       Reject

Solution

This behavior is expected.

If the physical interface is disabled in the configuration or is physically down, leading to the local IP route being set as a Local reject route.

Or when the IP address is in a source nat pool or a destination nat pool, the /32 host route of the IP address will be a Static reject route.

Modification History

2024-07-18 : Article Created

2025-08-29 : update static reject route in nat pools