Knowledge Search


[SRX] When route load-balancing is configured, what is the source IP address for self-initiated traffic?

  [KB33545] Show Article Properties


This article attempts to answer the following question: what is the source IP address for self-initiated traffic when route load-balancing is configured on SRX devices?




  • Route load-balancing is already configured. To see an example of load-balancing BGP traffic, refer to Example: Load Balancing BGP Traffic.

  • The SRX device is configured with a lo0 interface that has an IP address.

  • Traffic is initiated from the SRX device towards a route for which load-balancing is configured.



The following is an example topology to demonstrate the solution. Here the SRX device has BGP neighborship with Router1 and Router2. The route for IP address on the SRX device is of equal cost towards both BGP neighbors, and is load-balanced on the SRX device.

Setup Output

ge-0/0/1.0              up    up   inet
ge-0/0/2.0              up    up   inet
lo0.0                   up    up   inet         --> 0/0


>run show route 

inet.0: 7 destinations, 8 routes (7 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both        *[BGP/170] 02:21:24, localpref 100, from
                      AS path: 1112 I, validation-state: unverified
                    >  to via ge-0/0/1.0

                    [BGP/170] 01:37:13, localpref 100
                      AS path: 1112 I, validation-state: unverified
                    > to via ge-0/0/2.0

Forwarding Table

Destination     Type     RtRef  Next hop   Type   Index   NhRef  Netif     user    0                 ulst   262142  2
                         ucst   1286    3      ge-0/0/1.0
                         ucst   1328    3      ge-0/0/2.0


  1. When the lo0 interface is configured with an IP address and self-initiated traffic is generated, the traffic will have the source IP address of the lo0 interface always unless any other source IP address is specified, and it may take any of two routes:

PING ( 56 data bytes

​Session ID: 451, Policy name: self-traffic-policy/1, Timeout: 50, Valid
In: -->;icmp, Conn Tag: 0x0, If: .local..0, Pkts: 1, Bytes: 84,  <<<<<<Source address of lo0
Out: -->;icmp, Conn Tag: 0x0, If: ge-0/0/2.0, Pkts: 0, Bytes: 0,                   
  1. When the lo0 interface does not have an IP address configured, the traffic may choose any of two routes and the source IP address of the egress interface. In this case, the behavior cannot be predicted.

Note: The above applies for all self-initiated traffic, including logging, IDP, download and so on, unless a specific source address is specified in the configuration.


Related Links: