HP 7102dl - ProCurve Secure Router Configuration Manual page 472

Network Monitoring
Configuring Network Monitoring
9-44
4. Configure PBR for the probe traffic.
ProCurve(config)# ip access-list extended MatchPing
ProCurve(config-ext-nacl)# permit icmp any hostname www.procurve.com
ProCurve(config-ext-nacl)# exit
ProCurve(config)# route-map Probes 10
ProCurve(config-route-map)# match ip address MatchPing
ProCurve(config-route-map)# set interface eth 0/2 null 0
ProCurve(config-route-map)# exit
ProCurve(config)# ip local policy route-map Probes
5. Configure NAT. Also activate the firewall and disable the RPF check.
ProCurve(config)# ip firewall
ProCurve(config)# ip access-list standard MatchAllPrimary
ProCurve(config-std-nacl)# permit any
ProCurve(config-std-nacl)# ip access-list standard MatchAllSecondary
ProCurve(config-std-nacl)# permit any
ProCurve(config-std-nacl)# ip policy-class Primary
ProCurve(config-policy-class)# allow list MatchAllPrimary
ProCurve(config-policy-class)# ip policy-class Secondary
ProCurve(config-policy-class)# allow list MatchAllSecondary
ProCurve(config-policy-class)# interface ethernet 0/2
ProCurve(config-eth 0/2)# access-policy Primary
ProCurve(config-eth 0/2)# interface demand 1
ProCurve(config-demand 1)# access-policy Secondary
ProCurve(config-demand 1)# exit
ProCurve(config)# no ip policy-class Primary rpf-check
ProCurve(config)# no ip policy-class Secondary rpf-check
ProCurve(config)# ip policy-class NATInside
ProCurve(config-policy-class)# nat source list MatchAllPrimary interface ether-
net 0/2 overload policy Primary
ProCurve(config-policy-class)# nat source list MatchAllSecondary interface
demand 1 overload policy Secondary
ProCurve(config-policy-class)# interface ethernet 0/1
ProCurve(config-eth 0/1)# access-policy NATInside
ProCurve(config-eth 0/1)# exit
6. Verify that the floating static route has been created through the demand
interface. (See Chapter 3: Configuring Backup WAN Connections for
instructions on configuring this interface.)
ProCurve(config)# ip route 0.0.0.0 /0 demand 1 20