Configuring A Pbr Policy; Configure The Acls - Dell PowerConnect B-RX Configuration Manual

22

Configuring a PBR policy

Configuring a PBR policy
To configure PBR, you define the policies using IP ACLs and route maps, then enable PBR globally
or on individual interfaces. The device programs the ACLs into the Layer 4 CAM on the interfaces
and routes traffic that matches the ACLs according to the instructions in the route maps.
To configure a PBR policy:
•
•
•

Configure the ACLs

PBR uses route maps to change the routing attributes in IP traffic. This section shows an example
of how to configure a standard ACL to identify the source subnet for IP traffic. Refer to the
21, "Access Control List"
To configure a standard ACL to identify a source subnet, enter a command such as the following.
BigIron RX(config)# access-list 99 permit 209.157.23.0 0.0.0.255
The command in this example configures a standard ACL that permits traffic from subnet
209.157.23.0/24. After you configure a route map that matches based on this ACL, the software
uses the route map to set route attributes for the traffic, thus enforcing PBR.
NOTE
Do not use an access group to apply the ACL to an interface. Instead, use a route map to apply the
ACL globally or to individual interfaces for PBR, as shown in the following sections.
Syntax: [no] access-list <num> deny | permit <source-ip> | <hostname> <wildcard>
or
Syntax: [no] access-list <num> deny | permit <source-ip>/<mask-bits> | <hostname>
Syntax: [no] access-list <num> deny | permit host <source-ip> | <hostname>
Syntax: [no] access-list <num> deny | permit any
The <num> parameter is the access list number and can be from 1 – 99.
The deny | permit parameter indicates whether packets that match a policy in the access list are
denied (dropped) or permitted (forwarded).
The <source-ip> parameter specifies the source IP address. Alternatively, you can specify the host
name.
NOTE
If you are configuring the ACL for use in a route map, always specify permit. Otherwise, the device
will ignore deny clauses and packets that match deny clauses that are routed normally.
566
•
ACL – 416 entries
•
Rate Limiting – 416, entries shared with PBR
Configure ACLs that contain the source IP addresses for the IP traffic you want to route using
PBR.
Configure a route map that matches on the ACLs and sets the route information.
Apply the route map to an interface.
for details on how to configure ACLs.
Chapter
BigIron RX Series Configuration Guide
53-1001986-01