HP 7102dl - ProCurve Secure Router Configuration Manual page 477

2. Configure the track.
ProCurve(config)# track FTPServers
ProCurve(config-track-FTPServers)# test probe FTPServer1 or probe FTPServer2
ProCurve(config-track-FTPServers)# dampening-interval 10
ProCurve(config-track-FTPServers)# log-changes
ProCurve(config-track-FTPServers)# exit
3. Configure routes. Enable the track to monitor the primary route.
ProCurve(config)# ip route 0.0.0.0 /0 ppp 1
ProCurve(config)# ip route 10.1.0.0 /16 ppp 1 track FTPServers
ProCurve(config)# ip route 10.1.0.0 /16 demand 1 20
4. Configure PBR for the probes. These probes use the same forwarding
interface, so you can configure a single route map entry.
ProCurve(config)# ip access-list extended ProbeFTP
ProCurve(config-ext-nacl)# permit tcp any host 10.1.2.60 eq 21
ProCurve(config-ext-nacl)# permit tcp any host 10.1.3.34 eq 21
ProCurve(config-ext-nacl)# exit
ProCurve(config)# route-map Probes 10
ProCurve(config-route-map)# match ip address ProbeFTP
ProCurve(config-route-map)# set interface ppp 1 null 0
ProCurve(config-route-map)# exit
ProCurve(config)# ip local policy route-map Probes
5. Configure NAT and disable reverse path forwarding. Configure NAT on
both the Internet connection and the demand routing connection. Make
sure that the HQ network has a route to your router's demand interface.
ProCurve(config)# ip firewall
ProCurve(config)# ip access-list standard MatchAllPrimary
ProCurve(config-std-nacl)# permit any
ProCurve(config-std-nacl)# ip access-list standard MatchAllBackup
ProCurve(config-std-nacl)# permit any
ProCurve(config-std-nacl)# ip policy-class Primary
ProCurve(config-policy-class)# allow list MatchAllPrimary
ProCurve(config-policy-class)# ip policy-class Backup
ProCurve(config-policy-class)# allow reverse list MatchAllBackup
ProCurve(config-policy-class)# exit
ProCurve(config)# interface ppp 1
ProCurve(config-ppp 1)# access-policy Primary
ProCurve(config-ppp 1)# interface demand 1
ProCurve(config-demand 1)# access-policy Backup
ProCurve(config-demand 1)# exit
ProCurve(config)# no ip policy-class Primary rpf-check
ProCurve(config)# no ip policy-class Backup rpf-check
Network Monitoring
Configuring Network Monitoring
9-49