Configuring Policy-Based Forwarding For Deep Packet Inspection (Dpi) In Vpls; Figure 98: Policy-Based Forwarding For Deep Packet Inspection - Alcatel-Lucent 7750 SR Manual

Configuring Policy-Based Forwarding for Deep Packet Inspection
(DPI) in VPLS
The purpose of policy-based forwarding is to capture traffic from a customer and perform a deep
packet inspection (DPI) and forward traffic, if allowed, by the DPI.
In the following example, the split horizon groups are used to prevent flooding of traffic. Traffic
from customers enter at SAP 1/1/5:5. Due to the mac-filter 100 that is applied on ingress, all traffic
with dot1p 07 marking will be forwarded to SAP 1/1/22:1, which is the DPI.
DPI performs packet inspection/modification and either drops the traffic or forwards the traffic
back into the box through SAP 1/1/21:1. Traffic will then be sent to spoke-sdp 3:5.
SAP 1/1/23:5 is configured to see if the VPLS service is flooding all the traffic. If flooding is
performed by the router then traffic would also be sent to SAP 1/1/23:5 (which it should not).
Figure 98
VPLS service. For information about configuring filter policies, refer to the 7750 SR OS Router
Configuration Guide.
Residential Split
IngressPBF Filter
on Incoming Traffic
Split Horizon SAPs

Figure 98: Policy-Based Forwarding For Deep Packet Inspection

7750 SR OS Services Guide
shows an example to configure policy-based forwarding for deep packet inspection on a
DPI Box
Virtual Private LAN Services
Normal Stream
PBF Diverted Stream
VPLS 10
Disable Learning
OSSG125
Page 583