Cabletron Systems SmartSwitch manual Creating Multi-statement IP Policies

Chapter 13: IP Policy-Based Forwarding Configuration Guide

cause packets matching a defined profile to be forwarded to a next-hop gateway, enter the following command in Configure mode:

Forward packets matching a profile to a next-hop gateway.

ip-policy <name> permit acl <profile> next- hop-list <ip-addr-list>

For example, the following command creates an IP policy called “p1” and specifies that packets matching profile “prof1” are forwarded to next-hop gateway 10.10.10.10:

ssr(config)# ip-policy p1 permit acl prof1 next-hop-list 10.10.10.10

You can also set up a policy to prevent packets from being forwarded by an IP policy. To prevent packets matching a defined profile from being forwarded by an IP policy to a next-hop gateway, enter the following command in Configure mode:

Prevent packets matching a profile from being forwarded by an IP policy.

ip-policy <name> deny acl <profile>

Packets matching the specified profile are forwarded using dynamic routes instead.

For example, the following command creates an IP policy called “p2” that prevents packets matching prof1 from being forwarded using an IP policy:

ssr(config)# ip-policy p2 deny acl prof1

Creating Multi-statement IP Policies

An IP policy can contain more than one ip-policystatement. For example, an IP policy can contain one statement that sends all packets matching a profile to one next-hop gateway, and another statement that sends packets matching a different profile to a different next- hop gateway. If an IP policy has multiple ip-policystatements, you can assign each statement a sequence number that controls the order in which they are evaluated. Statements are evaluated from lowest sequence number to highest.

To specify the order in which IP policy statements are evaluated by an IP policy, enter the following command in Configure mode:

Specify a sequence number for IP policy statements

ip-policy <name> permitdeny acl <profile> sequence <num>

For example, the following commands create an IP policy called “p3”, which consists of two IP policy statements. The ip policy permit statement has a sequence number of 1,

SmartSwitch Router User Reference Manual 211