Dell S6000-ON, Руководство по настройке

Страница: 659 / 1080

Defined as:
seq 5 permit ip 200.200.200.200 200.200.200.200 199.199.199.199
199.199.199.199
seq 10 redirect 1.1.1.2 tcp 234.224.234.234 255.234.234.234
222.222.222.222/24
seq 40 ack, Next-hop reachable(via Te 8/1/1)
Applied interfaces:
Te 8/2/1
Hot-Lock PBR
Ingress and egress Hot Lock PBR allows you to add or delete new rules into an existing policy (already
written into content address memory [CAM]) without disruption to traffic flow. Existing entries in CAM are
adjusted to accommodate the new entries. Hot Lock PBR is enabled by default.
Configuration Task List for Policy-based Routing
To enable the PBR:
• Create a Redirect List
• Create a Rule for a Redirect-list
• Create a Track-id list. For complete tracking information, refer to Object Tracking chapter.
• Apply a Redirect-list to an Interface using a Redirect-group
PBR Exceptions (Permit)
Use the command permit to create an exception to a redirect list. Exceptions are used when a
forwarding decision should be based on the routing table rather than a routing policy.
Dell Networking OS assigns the first available sequence number to a rule configured without a sequence
number and inserts the rule into the PBR CAM region next to the existing entries. Because the order of
rules is important, ensure that you configure any necessary sequence numbers.
The
permit
statement is never applied because the redirect list covers all source and destination IP
addresses.
Ineffective PBR Exception due to Low Sequence Number.
ip redirect-list rcl0
seq 5 redirect 2.2.2.2 ip any any
seq 10 permit ip host 3.3.3.3 any
To ensure that the
permit
permit statement or PBR exception is effective, use a lower sequence number,
as shown below:
ip redirect-list rcl0
seq 10 permit ip host 3.3.3.3 any
seq 15 redirect 2.2.2.2 ip any any
Create a Redirect List
To create a redirect list, use the following commands.
Create a redirect list by entering the list name.
CONFIGURATION mode
Policy-based Routing (PBR)
659