xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
268
34
P
OLICY
R
OUTE
C
OMMANDS
Policy Based routing is a method used by the Switch to give specified devices a cleaner path to the Internet. Used in conjunction with
the Access Profile feature, the Switch will identify traffic originating from a specified IP address and forward it on to a next hop
router that has a less congested connection to the Internet than the normal routing scheme of your network.
The steps needed to set up policy-based routing on the switch are as follows:
1.
Create an access profile using the
create access_profile
command which specifies information that will identify the
device to be given a policy route.
2.
Modify the rule regarding this access profile using the
config access_profile
command. (Remember not to add the deny
parameter to this rule, or packets will be dropped and the policy route will not take effect.)
3.
Name the policy route to be used by configuring the
create policy_route
command.
4.
Bind the access profile (profile_id) and its rule (access_id) to this policy route using the
config policy_route
command.
This command must also to be used to add the next hop IP address of the device that will be connected directly to the
gateway router. When the time is ready to deploy the policy route, the administrator must enable this function here as
well (state [enable | disable
])
.
Once completed, the Switch will identify the device to be given a policy route using the access profile function, recognize that is has a
Policy Based route, and then forward the information on to the specified next hop router, that will, in turn, relay packets to the
gateway router. Thus, the new, cleaner path to the Internet has been formed.
The Policy Route commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following
table.
Command Parameters
create policy_route
name <policyroute_name 32>
config policy_route
name <policyroute_name 32> acl profile_id <value 1-14> access_id
<value 1-128> nexthop <ipaddr> state [enable | disable]
delete policy_route
name <policyroute_name 32>
show policy_route
Each command is listed, in detail, in the following sections.
create policy_route
Purpose
Used to create a name to identify a policy route.
Syntax
create policy_route name <policyroute_name 32>
Description
This command is used to create a policy route name which will identify the policy
route.
Parameters
name <policyroute_name 32> -
Enter an alphanumeric name of no more than 32
characters to identify this policy route.
Restrictions
Only administrator-level and operator-level users can issue this command.
Example usage:
To create the policy route name “manager”: