HP 7102dl - ProCurve Secure Router Configuration Manual page 113

N o t e
When you view the demand interface in the running-config, you will see two
commands, even though you entered only one. (See Figure 3-7.)
interface demand 1
match-interesting list Backup out
match-interesting reverse list Backup in
Figure 3-7. The match-interesting Command as Displayed in the Running-Config
Entering the following two commands would accomplish the same thing as
entering match-interesting list Backup:
ProCurve(config-demand 1)# match-interesting list Backup out
ProCurve(config-demand 1)# match-interesting reverse list Backup in
After you configure demand routing, you should monitor usage of the dial-up
connection to determine if you have correctly configured the ACL to select
interesting traffic. To avoid any problems when the bill for the dial-up connec-
tion arrives, ensure that the dial-up connection is being triggered only when
you want it to be. To minimize costs, you may need to change the ACL by
further limiting the traffic that triggers the connection.
Applying an ACP or Another ACL to the Demand Interface. In addi-
tion to using an ACL to determine which traffic triggers a dial-up connection,
you can use ACLs to control incoming traffic and outgoing traffic on that
connection. You have two options for controlling traffic:
You can apply ACLs directly to the demand interface. If you choose this
option, you can apply one ACL directly to the interface to control incom-
ing traffic, and you can apply another ACL directly to the interface to
control outgoing traffic. (For best practices, you typically apply an
extended ACL closest to the source of incoming traffic so that you do not
waste the router's processing time on traffic that will ultimately be dis-
carded.)
You can apply an access control policy (ACP) to the demand interface.
ACPs control incoming traffic and can contain multiple ACLs.
You use the ip access-group command to apply ACLs directly to the demand
interface, or you use the access-policy command to apply an ACP to the
demand interface. (For more information about using ACLs separately or in
combination with ACPs, see Chapter 5: Applying Access Control to Router
Interfaces.) The ProCurve Secure Router will match traffic to the ACLs or the
Configuring Backup WAN Connections
Configuring Demand Routing for Backup Connections
3-25