Table of Contents
Advertisement
The following is the configuration for Policy Router 1 in
vlan create firewall
vlan add ports et.1.(1-5) to firewall
interface create ip firewall address-netmask 1.1.1.5/16 vlan firewall
acl firewall permit ip any any any 0
ip-policy p1 permit acl firewall next-hop-list "1.1.1.1 1.1.1.2 1.1.1.3
1.1.1.4" action policy-only
ip-policy p1 set load-policy ip-hash both
ip-policy p1 apply interface mls1
The following is the configuration for Policy Router 2 in
vlan create firewall
vlan add ports et.1.(1-5) to firewall
interface create ip firewall address-netmask 2.2.2.5/16 vlan firewall
acl firewall permit ip any any any 0
ip-policy p2 permit acl firewall next-hop-list "2.2.2.1 2.2.2.2 2.2.2.3
2.2.2.4" action policy-only
ip-policy p2 set load-policy ip-hash both
ip-policy p2 apply interface mls2
Monitoring IP Policies
The ip-policy show command reports information about active IP policies, including
profile definitions, policy configuration settings, and next-hop gateways. The command
also displays statistics about packets that have matched an IP policy statement as well as
the number of packets that have been forwarded to each next-hop gateway.
To display IP policy information, enter the following commands in Enable mode.
Display information about all
IP policies.
Display statistics about a
specific IP policy.
Internet Appliance User Reference Manual
Chapter 10: IP Policy-Based Forwarding Configuration Guide
ip-policy show all
ip-policy show policy-name all
ip-policy show policy-name
Figure
23.
Figure
23.
<name>
181
Advertisement
Table of Contents
