494CHAPTER 32: CONFIGURING IP POLICY ROUTING

IP Policy Routing

This section describes two different configurations for IP policy routing with a

Configuration

suggested procedure for each configuration.

Example

 

Configure Policy Routing Define a policy named “aaa” that includes two nodes, through which all TCP Based on Source Address messages are transferred from serial interface 0 and the others are transferred

from serial interface 1.

Node 10 indicates that messages matched with access list 102 will be sent to serial interface 0.

Node 20 indicates that all the other messages will be sent to serial interface 1.

The messages from Ethernet 0 attempt to match if-match clauses of nodes 10 and 20, in turn. If nodes in permit mode are matched, the corresponding apply clauses are executed. If nodes in deny modes are matched, exit from policy routing.

LAN A is connected with the Internet through the 3Com router, requiring that TCP messages be transmitted through path 1 and other messages be transmitted through path 2.

Figure 160 Networking diagram of configuring policy routing based on source address

LAN A 10.110.0.0/16

EO

S0

S1

 

Quidway

Internet

1Define access list:

[Router]acl 101

[Router-acl-101]rule deny tcp source any destination any

[Router-acl-101]acl 102

[Router-acl-102]rule permit tcp source any destination any

2Define a node 10, indicating messages matching access list 102 will be sent to serial interface 1

[Router-acl-101]route-policy aaa permit 10

[Router-route-policy]if-match ip address 102

[Router-route-policy]apply interface serial 1

3Define node 20, indicating all the other messages will be sent to serial interface 0

[Router-route-policy]route-policy aaa permit 20

[Router-route-policy]if-match ip address 101

[Router-route-policy]apply interface serial 0

Page 498
Image 498
3Com 10014299 manual Suggested procedure for each configuration, Define access list