Description

PTX10k3 EVO - RPF mode loose droping packets with forwarding-based-filters/Redirect flowspec are used

Symptoms

Traffic ingress on default RI on interface x which has the rpf-loose with redirect to VRF is dropping traffic due to RPF check.

Solution

PTX-EVO handles FBF a little differently than in JUNOS/MX. On PTX platforms, the filter lookup precedes the source/destination IP lookup. Therefore, source and destination IP lookup happens within the context of the VRF instance. For JUNOS, the SA lookup uses the default RI and DA lookup is used in the VRF.


RLI54582 will reolve this issue as the SA will be checked in default RI and NOT VRF where the DA will be used which is being done today. JUNOS/MX behaves correctly. -- This is scheduled for 25.2R1-EVO.

Modification History

2025-02-16 : Article Created