HP 7102dl - ProCurve Secure Router Configuration Manual page 482

Network Monitoring
Configuring Network Monitoring
9-54
ProCurve(config-route-map)# set interface demand 1 null 0
ProCurve(config-route-map)# exit
ProCurve(config)# ip local policy route-map Probes
5. Modify the ACL that selects Interesting traffic for demand routing so that
the HTTPSecondary probe does not bring the ISDN link up. For example,
enter:
ProCurve(config)# ip access-list extended Interesting
ProCurve(config-ext-nacl)# deny tcp any eq 5151 host 10.5.4.20 eq www
ProCurve(config-ext-nacl)# permit ip any any
ProCurve(config-ext-nacl)# interface demand 1
ProCurve(config-demand 1)# match-interesting list Interesting
ProCurve(config-demand 1)# exit
6. Configure NAT and disable reverse path forwarding.
ProCurve(config)# ip firewall
ProCurve(config)# ip access-list standard MatchAllPrimary
ProCurve(config-std-nacl)# permit any
ProCurve(config-std-nacl)# ip access-list standard MatchAllSecondary
ProCurve(config-std-nacl)# permit any
ProCurve(config-std-nacl)# exit
ProCurve(config)# ip policy-class Primary
ProCurve(config-policy-class)# allow list MatchAllPrimary
ProCurve(config-policy-class)# ip policy-class Secondary
ProCurve(config-policy-class)# allow list MatchAllSecondary
ProCurve(config-policy-class)# exit
ProCurve(config)# interface ethernet 0/2
ProCurve(config-eth 0/2)# access-policy Primary
ProCurve(config-eth 0/2)# interface demand 1
ProCurve(config-demand 1)# access-policy Secondary
ProCurve(config-demand 1)# exit
ProCurve(config)# no ip policy-class Primary rpf-check
ProCurve(config)# no ip policy-class Secondary rpf-check
ProCurve(config)# ip policy-class NATInside
ProCurve(config-policy-class)# nat source list MatchAllPrimary interface
ethernet 0/2 overload policy Primary
ProCurve(config-policy-class)# nat source list MatchAllSecondary interface
demand 1 overload policy Secondary
ProCurve(config-policy-class)# exit
ProCurve(config)# interface ethernet 0/1
ProCurve(config-eth 0/1)# access-policy NATInside
ProCurve(config-eth 0/1)# exit
7. Create the floating static route.
ProCurve(config)# ip route 0.0.0.0 /0 demand 1 20