Hà Nội: NTT03, Line 1, Thống Nhất Complex, 82 Nguyễn Tuân, Thanh Xuân, Hà Nội. ● HCM: Số 31B, Đường 1, Phường An Phú, Quận 2 (Thủ Đức), TP HCM. ===> Đơn Vị Hàng Đầu Trong Lĩnh Vực Cung Cấp Thiết Bị Security - Network - Wifi - CCTV - Conference - Máy chủ Server - Lưu trữ Storge.
Danh mục sản phẩm

Configure PBR

The PBR is achieved depending on the packet filtering by the ACL rule. The ACL rule first filters the qualified packets and then forward the packets to the next hop by executing the PBR.

Configuration Condition

Before configuring the PBR function, first complete the following task:

  • Configure the ACL and the ACL rule.

Configure Next Hop IP Address for Forwarding Packet

Configure the next hop IP address for the forwarding the packet to specify the destination IP address of the PBR.

Up to 6 next hop IP addresses can be specified for forwarding the packet. If the user configures multiple next hop IP addresses simultaneously and multiple next hop IP addresses are reachable, then the packet will choose the next hop IP address for forwarding using the load balancing mode.

Table 14-2 Configure the next hop IP address for forwarding the packet

Step

Command

Description

Enter the global configuration mode

configure terminal

-

Enter the PBR action group configuration mode

pbr-action-group pbr-action-group-name

-

Configure the next hop IP address for forwarding the packet

redirect ipv4-nexthop ip-address [ip-address] [ip-address ] [ip-address ] [ip-address ] [ip-address ] [vrf vrf-name]

Mandatory

By default, the next hop IP address for forwarding the packet is not configured.

note


  • If all the configured next hop IP addresses are unreachable, then the PBR function will not take effect.
  • The next hop IP address cannot be configured as the local IP address, multicast IP address, and broadcast IP address.

Configure Standby Next Hop IP Address for Forwarding Packet

Configure the standby next hop IP address for the forwarding the packet to specify the destination IP address of the PBR.

When the active next hop is not reachable, if the standby next hop IP address is reachable, the packet will be forwarded to the standby next hop IP address. If the active next hop is reachable, the packet will continue to be forwarded to the active next hop IP address.

Table 14-3 Configure the standby next hop IP address for forwarding the packet

Step

Command

Description

Enter the global configuration mode

configure terminal

-

Enter the PBR action group configuration mode

pbr-action-group pbr-action-group-name

-

Configure the standby next hop IP address for forwarding the packet

redirect ipv4-nexthop backup ip-address [vrf vrf-name]

Mandatory

By default, the standby next hop IP address for forwarding the packet is not configured.

note


  • If all the configured standby next hop IP addresses are unreachable, then the PBR function will not take effect.
  • The next hop IP address cannot be configured as the multicast IP address and broadcast IP address.

Configure the Next-hop IPv6 Address of Packet Forwarding

Configure the next-hop IPv6 address of the packet forwarding, so as to specify the destination address of the policy route.

You can specify six next-hop IPv6 addresses of the packet forwarding at most. If the user configures multiple next-hop IPv6 addresses at the same time, and there are multiple next-hop IPv6 addresses reachable, the packet adopts the load balancing mode to specify the next-hop IPv6 address for forwarding.

Table 14-4 Configure the next-hop IPv6 address of the packet forwarding

Step

Command

Description

Enter the global configuration mode

configure terminal

-

Enter the PBR action group configuration mode

pbr-action-group pbr-action-group-name

-

Configure the next-hop IPv6 address of the packet forwarding

redirect ipv6-nexthop ipv6-address [ipv6-address] [ipv6-address ] [ipv6-address ] [ipv6-address ] [ipv6-address ] [vrf vrf-name]

Mandatory
By default, do not configure the next-hop IPv6 address of the packet forwarding.

note


  • If the configured next-hop IPv6 addresses are unreachable, then the PBR function will not take effect.
  • The next-hop IP address cannot be configured as the local IPv6 address, multicast address, or broadcast address.

Configure Standby Next Hop IPv6 Address for Forwarding Packet

Configure the standby next hop IPv6 address for the forwarding the packet to specify the destination IP address of the PBR.

When the active next hop is not reachable, if the standby next hop IPv6 address is reachable, the packet will be forwarded to the standby next hop IPv6 address. If the active next hop is reachable, the packet will continue to be forwarded to the active next hop IPv6 address.

Table 14-5 Configure the standby next hop IPv6 address for forwarding the packet

Step

Command

Description

Enter the global configuration mode

configure terminal

-

Enter the PBR action group configuration mode

pbr-action-group pbr-action-group-name

-

Configure the standby next hop IPv6 address for forwarding the packet

redirect ipv6-nexthop backup ipv6-address [vrf vrf-name]

Mandatory

By default, the standby next hop IPv6 address for forwarding the packet is not configured.

note


  • If the configured standby next hop IPv6 addresses are unreachable, then the PBR function will not take effect.
  • The next hop IPv6 address cannot be configured as the multicast IP address and broadcast IP address.

Configure PBR Action Group to Bind with ACL

Configure the PBR action group to bind with the ACL to achieve all rules in the ACL to associate with the PBR execution actions.

After the PBR action group is bound to the ACL, all rules in the ACL will establish the association with the PBR execution actions. If the packet received by the interface matches the ACL rule, then the packet will be forwarded to the next hop.

Table 14-6 Configure the PBR action group to bind with the ACL

Step

Command

Description

Enter the global configuration mode

configure terminal

-

Configure the PBR action group to bind with the ACL

ip pbr-action-group pbr-action-group-name access-list { access-list-number | access-list-name }

Optional

By default, the PBR action group is not bound with the IP ACL.
The PBR action group supports the IP ACL binding. The IP ACL contains the IP standard ACL and IP extended ACL.

 

ipv6 pbr-action-group pbr-action-group-name access-list { access-list-number | access-list-name }

Optional

By default, do not bind PBR action group with the IPv6 ACL.
The PBR action group supports IPv6 ACL binding. IPv6 ACL contains IPv6 standard ACL and IPv6 extended ACL.

note


  • Only when the configured next hop IP address is reachable, the PBR can take effect.
  • The PBR can take effect only for the rules allowed in the ACL.

Configure PBR Action Group to Bind ACL Rule

Configure the PBR action group to bind with the ACL rule to achieve the ACL rule to associate with the PBR execution actions.

After the PBR action group is bound to the ACL rule, the ACL rule will establish the association with the PBR execution actions. If the packet received by the interface matches the ACL rule, then the packet will be forwarded to the next hop specified by the action group.

Table 14-7Configure the PBR action group to bind with the ACL rule

Step

Command

Description

Enter the global configuration mode

configure terminal

-

Configure the PBR action group to bind with the ACL rule

Refer to the section "Configure IP standard ACL".

Refer to the section "Configure IP extended ACL".

Refer to “Configure IPv6 Standard ACL”.

Refer to “Configure IPv6 Extended ACL”.

In the permit rules of the IP standard ACL and extended ACL, the PBR action group must be specified to take the PBR into effect.

When configuring the permit rules of the IPv6 standard ACL and extended ACL, the PBR action group must be specified to take the PBR into effect.

note


  • Only when the configured next hop IP address is reachable, the PBR can take effect.
  • The PBR can take effect only for the rules allowed in the ACL.