Node 10 indicates packets matching ACL 3102 do not go through policy
■
routing.
Network diagram
Figure 219 Network diagram for policy routing based on source address
Internet
Router
S2/0
S2/1
Eth1/0
Subnet A
10 ::110 /64
Host A
Configuration procedure
# Define ACLs, making ACL 3001 match TCP packets, and ACL 3002 match IPv6
packets.
<Router> system-view
[Router] ipv6
[Router] acl ipv6 number 3001
[Router-acl6-adv-3001] rule permit tcp
[Router-acl6-adv-3001] quit
[Router] acl ipv6 number 3002
[Router-acl6-adv-3002] rule permit ipv6
[Router-acl6-adv-3002] quit
# Define Node 5 of policy aaa so that TCP packets are forwarded to the interface
Serial 2/0.
[Router] ipv6 policy-based-route aaa permit node 5
[Router-pbr6-aaa-5] if-match acl6 3001
[Router-pbr6-aaa-5] apply output-interface serial 2/0
[Router-pbr6-aaa-5] quit
# Define Node 10 of policy aaa so that policy routing will not be applied to packets
matching ACL 3102 and these packets will be forwarded through the routing
table.
[Router] ipv6 policy-based-route aaa deny node 10
[Router-pbr6-aaa-10] if-match acl6 3002
[Router-pbr6-aaa-10] quit
# Apply the policy aaa to the interface Ethernet 1/0 to enable policy routing.
IPv6 Unicast Policy Routing Configuration Examples
Host B
735
Need help?
Do you have a question about the MSR 50 Series and is the answer not in the manual?
Questions and answers