Cabletron Systems SmartSwitch manual Using an IP policy to route traffic to two different ISPs

Chapter 13: IP Policy-Based Forwarding Configuration Guide

In the sample configuration in Figure 19, the policy router is configured to divide traffic originating within the corporate network between different ISPs (100.1.1.1 and 200.1.1.1).

Group user-a

10.50.*.*

Group user-b

11.50.*.*

ISP1

100.1.1.1

et.1.1

Policy

Router

et.1.2

ISP2

200.1.1.1

Figure 19. Using an IP policy to route traffic to two different ISPs

HTTP traffic originating from network 10.50.0.0 for destination 207.31.0.0/16 is forwarded to 100.1.1.1. Non-HTTP traffic originating from network 10.50.0.0 for destination 207.31.0.0/16 is forwarded to 200.1.1.1. All other traffic is forwarded to 100.1.1.1.

The following is the IP policy configuration for the Policy Router in Figure 19:

interface create ip user-a address-netmask 10.50.1.1/16 port et.1.1 interface create ip user-b address-netmask 11.50.1.1/16 port et.1.2

acl user-a-http permit ip 10.50.0.0/16 207.31.0.0/16 any http 0 acl user-a permit ip 10.50.0.0/16 207.31.0.0/16 any any 0

acl user-b permit ip 11.50.0.0/16 any any any 0

ip-policy net-a permit acl user-a-http next-hop-list 100.1.1.1 action policy-first sequence 20

ip-policy net-a permit acl user-a next-hop-list 200.1.1.1 action policy- only sequence 25

ip-policy net-a apply interface user-a

ip-policy net-b permit acl user-b next-hop-list 200.1.1.1 action policy- first

ip-policy net-b apply interface user-b

SmartSwitch Router User Reference Manual 215