HPE FlexNetwork HSR6800 Configuration Manual page 279

Clause
apply access-vpn
vpn-instance
apply
ip-precedence
apply
output-interface
and apply
ip-address
next-hop
apply default
output-interface
and apply
ip-address default
next-hop
apply fail-action
continue
Relationship between the match mode and clauses on a node
Does a packet match all
the if-match clauses on
the node?
Yes
No
All packets can match a node where no if-match clauses are configured.
If a permit-mode node has no apply clause, packets matching all the if-match clauses of the node
are forwarded according to the routing table.
If a node has no if-match or apply clauses configured, all packets can match the node and are
forwarded according to the routing table.
Meaning
Sets VPN instances.
Sets an IP precedence.
Sets the output interface
and sets the next hop.
Sets the default output
interface and sets the
default next hop.
Matches packets against
the next node upon failure
on the current node.
permit
PBR executes the apply clause on
the node.
PBR matches the packet against
the next node.
267
Priority
If this clause is configured, other apply clauses,
except the apply ip-df zero clause, are not executed.
If a packet matches a forwarding entry of a specified
VPN instance, it is forwarded in the VPN instance. If it
does not match any entry in all VPN instances
specified, it is discarded.
If the apply access-vpn vpn-instance clause is not
configured, this clause is always executed.
The apply ip-address next-hop clause takes
precedence over the apply output-interface clause.
Only the apply ip-address next-hop clause is
executed when both are configured.
The apply ip-address default next-hop clause
takes precedence over the apply default
output-interface clause. Only the apply ip-address
default next-hop is executed when both are
configured.
They take effect only when no output interface or next
hop is set or the output interface and next hop are
invalid, and the packet does not match any route
(except the default route) in the routing table.
The apply fail-action continue clause applies:
•
When the apply output-interface, apply
ip-address next-hop, apply default
output-interface and apply ip-address default
next-hop clauses are not configured.
•
When one or more of them are configured but
are invalid, for example, the specified output
interface is down or the specified next hop is
unreachable.
Match mode
deny
The packet is forwarded according
to the routing table.
PBR matches the packet against
the next node.