Matching The Interesting Traffic - HP 7102dl - ProCurve Secure Router Configuration Manual

Procurve secure router 7000dl series - advanced management and configuration guide
Hide thumbs Also See for 7102dl - ProCurve Secure Router:
Table of Contents

Advertisement

Configuring Backup WAN Connections
Configuring Demand Routing for Backup Connections
3-24

Matching the Interesting Traffic

To finish defining the interesting traffic that will trigger a dial-up connection,
you must associate the ACL you created with the demand interface. From the
demand interface configuration mode context, enter:
Syntax: match-interesting [list | reverse list] <listname > [in | out]
Include the list option if you want the ProCurve Secure Router to use standard
matching logic for the ACL. That is, the router will try to match the packet's
source address to the source address that is defined in the extended ACL.
Likewise, the router will try to match the packet's destination address with
the destination address that is defined in the extended ACL.
Include the reverse list option if you want the ProCurve Secure Router to
use reverse matching logic when processing the ACL. This option eliminates
the need to create another ACL for return traffic. The router will try to match
the packet's source address with the destination address that is defined in the
ACL. The router will then try to match the packet's destination address with
the source address that is defined in the ACL.
Replace <listname> with the ACL that you created to define the interesting
traffic. You can specify only extended ACLs.
Including in or out is optional. By default, the ProCurve Secure Router uses
the ACL you specify to check both incoming and outgoing traffic. If you do
not specify a direction, outbound traffic is matched to the specified ACL, and
inbound traffic is matched to the reverse of the ACL.
Outbound interesting traffic triggers the demand interface to initiate the dial-
up link. Outbound interesting traffic also resets the idle timer on an active link.
(The idle timer determines how long the ISDN connection can remain up if no
traffic is transmitted over it.) Inbound interesting traffic only resets the
idle timer.
If you include the in option when you enter the match-interesting command,
the ProCurve Secure Router will use the specified list to select inbound
interesting traffic. If you include the out option, the router will determine
whether the traffic outbound through the interface is interesting.
For example, if you want to apply the Backup ACL to demand 1 interface,
enter:
ProCurve(config-demand 1)# match-interesting list Backup

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Procurve secure router 7203dl j8753a j8753a

Table of Contents