In the sample configuration in
originating within the corporate network between different ISPs (100.1.1.1 and 200.1.1.1).
Group user-a
10.50.*.*
Group user-b
11.50.*.*
HTTP traffic originating from network 10.50.0.0 for destination 207.31.0.0/16 is
forwarded to 100.1.1.1. Non-HTTP traffic originating from network 10.50.0.0 for
destination 207.31.0.0/16 is forwarded to 200.1.1.1. All other traffic is forwarded to
100.1.1.1.
The following is the IP policy configuration for the Policy Router in
interface create ip user-a address-netmask 10.50.1.1/16 port et.1.1
interface create ip user-b address-netmask 11.50.1.1/16 port et.1.2
acl user-a-http
acl user-a
acl user-b
ip-policy net-a permit acl user-a-http next-hop-list 100.1.1.1 action
policy-first sequence 20
ip-policy net-a permit acl user-a next-hop-list 200.1.1.1 action policy-
only sequence 25
ip-policy net-a apply interface user-a
ip-policy net-b permit acl user-b next-hop-list 200.1.1.1 action policy-
first
ip-policy net-b apply interface user-b
SmartSwitch Router User Reference Manual
Figure
Figure 19. Using an IP policy to route traffic to two different ISPs
permit ip 10.50.0.0/16 207.31.0.0/16 any http 0
permit ip 10.50.0.0/16 207.31.0.0/16 any any 0
permit ip 11.50.0.0/16 any any any 0
Chapter 13: IP Policy-Based Forwarding Configuration Guide
19, the policy router is configured to divide traffic
et.1.1
Policy
Router
et.1.2
ISP1
100.1.1.1
ISP2
200.1.1.1
Figure
19:
215
Need help?
Do you have a question about the SmartSwitch Router and is the answer not in the manual?
Questions and answers