![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275414.webp)
Foundry Switch and Router Installation and Configuration Guide
13 - 26
December 2000
•
Specify the default next-hop IP address if there is no explicit next-hop selection for the packet.
•
Send the packet to the null interface (null0).
•
Send the packet to the specified POS port.
Foundry’s PBR routing is based on standard and extended ACLs and route-maps. The ACLs classify the traffic.
Route maps that match on the ACLs set routing attributes for the traffic. Foundry's implementation of PBR uses
high performance switching algorithms including route caches and route tables.
Configuring PBR
To configure PBR:
•
Configure ACLs that contain the source IP addresses for the IP traffic to which you want to apply PBR.
•
Configure a route map that matches on the ACLs and sets route information.
•
Apply the route map globally or to individual interfaces.
NOTE:
All the procedures in the following sections are for the CLI.
Configure the ACLs
PBR uses route maps to change the routing attributes in IP traffic. This section shows an example of how to
configure a standard ACL to identify the source sub-net for IP traffic.
To configure a standard ACL to identify a source sub-net, enter a command such as the following:
BigIron(config)# access-list 1 permit 209.157.23.0 0.0.0.255
The command in this example configures a standard ACL that permits traffic from sub-net 209.157.23.0/24. After
you configure a route map that matches based on this ACL, the software uses the route map to set route attributes
for the traffic, thus enforcing PBR.
NOTE:
Do not use an access group to apply the ACL to an interface. Instead, use a route map to apply the ACL
globally or to individual interfaces for PBR, as shown in the following sections.
Syntax:
[no] access-list <num> deny | permit <source-ip> | <hostname> <wildcard> [log]
or
Syntax:
[no] access-list <num> deny | permit <source-ip>/<mask-bits> | <hostname> [log]
Syntax:
[no] access-list <num> deny | permit host <source-ip> | <hostname> [log]
Syntax:
[no] access-list <num> deny | permit any [log]
The <num> parameter is the access list number and can be from 1 – 99.
The
deny | permit
parameter indicates whether packets that match a policy in the access list are denied
(dropped) or permitted (forwarded).
NOTE:
If you are configuring the ACL for use in a route map, always specify
permit
. Otherwise, the Layer 3
Switch drops the traffic instead of further processing the traffic using the route map.
The <source-ip> parameter specifies the source IP address. Alternatively, you can specify the host name.
NOTE:
To specify the host name instead of the IP address, the host name must be configured using the Foundry
device’s DNS resolver. To configure the DNS resolver name, use the
ip dns server-address…
command at the
global CONFIG level of the CLI.
The <wildcard> parameter specifies the mask value to compare against the host address specified by the
<source-ip> parameter. The <wildcard> is a four-part value in dotted-decimal notation (IP address format)
consisting of ones and zeros. Zeros in the mask mean the packet’s source address must match the <source-ip>.
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...