Policy-Based Routing; Configure A Routing Policy - Digi IX10 User Manual

Routing
5. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
6. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.

Policy-based routing

Normally, a routing device determines how to route a network packet based on its destination
address. However, you can use policy-based routing to forward the packet based on other criteria,
such as the source of the packet. For example, you can configure the IX10 device so that high-priority
traffic is routed through the cellular connection, while all other traffic is routed through an Ethernet
(WAN) connection.
Policy-based routing for the IX10 device uses the following criteria to determine how to route traffic:
Firewall zone (for example, internal/outbound traffic, external/inbound traffic, or IPSec tunnel
n
traffic).
Network interface (for example, the cellular connection, the WAN, or the LAN).
n
IPv4 address.
n
IPv6 address.
n
MAC address.
n
Domain.
n
Protocol type (TCP, UDP, ICMP, or all).
n
The order of the policies is important. Routing policies are processed sequentially; as a result, if a
packet matches an earlier policy, it will be routed using that policy's rules. It will not be processed by
any subsequent rules.

Configure a routing policy

Required configuration items
The packet matching parameters. It can any combination of the following:
n
Source interface.
l
Source address. This can be a firewall zone, an interface, a single IPv4/IPv6 address or
l
network, or a MAC address.
Destination address. This can be a firewall zone, an interface, a single IPv4/IPv6 address or
l
network, or a domain.
Protocol. This can be any, tcp, udp or icmp.
l
Source port. This is only used if the protocol is set to tcp or udp.
l
Destination port. This is only used if protocol is set to tcp or udp.
l
The network interface used to reach the destination.
n
IX10 User Guide
IP routing
128