Configure PBR Application
The PBR application actually is the application of the ACL with the PBR. The validation of the PBR depends on the ACL rule. The ACL can be applied to the L2/L3 Ethernet interface, VLAN, Interface VLAN and globally.
When the ACL with the PBR is applied to L2/L3 Ethernet interface, VLAN, Interface VLAN and globally, it may cause collision. In this case, the PBR corresponding to the high priority takes effect and the priority in the descending order is as follows: port, VLAN/Interface VLAN, globally.
Configuration Condition
None
Configure to Apply ACL with PBR to L2/L3 Ethernet Interface
After the ACL with the PBR is applied to the L2/L3 Ethernet interface, the corresponding L2/L3 Ethernet interface will have the PBR function.
Table 14-8 Configure to apply the PBR to the L2/L3 Ethernet interface
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the L2/L3 Ethernet interface configuration mode
|
interface interface-name
|
Either
After entering the L2/L3 Ethernet interface configuration mode, the subsequent configuration can only take effect on the current interface.
After entering the aggregation group configuration mode, t the subsequent configuration can only take effect on the aggregation group.
|
Enter the aggregation group configuration mode
|
link-aggregation link-aggregation-id
|
Configure to apply the PBR to the interface
|
ip policy-based-route { access-list-number | access-list-name }
|
Optional
By default, the interface does not apply the IP ACL with PBR.
|
|
ipv6 policy-based-route { access-list-number | access-list-name }
|
Optional
By default, the interface does not apply the IPv6 ACL with PBR
|
Configure to Apply ACL with PBR to VLAN
After the ACL with PBR is applied to the VLAN, all interfaces in the corresponding VLAN will have the PBR function.
Table 14-9 Configure to apply the PBR to the VLAN
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the VLAN configuration mode
|
vlan vlan-id
|
-
|
Apply the PBR to the VLAN
|
ip policy-based-route { access-list-number | access-list-name }
|
Optional
By default, the VLAN does not apply the IP ACL with PBR.
|
Configure to Apply ACL with PBR to Interface VLAN
After the ACL with PBR is applied to the Interface VLAN, the corresponding Jnterface VLAN interfaces will have the PBR function.
Table 8-7 Configure to apply the PBR to Interface VLAN
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Enter the Interface VLAN configuration mode
|
Interface vlan vlan-id
|
-
|
Configure to apply the PBR to Interface VLAN
|
ip policy-based-route { access-list-number | access-list-name }
|
Optional
By default, Interface VLAN is not applied to the IP ACL with the PBR.
|
|
ipv6 policy-based-route { access-list-number | access-list-name }
|
Optional
By default, Interface VLAN is not applied to the IPv6 ACL with the PBR.
|
Configure to Apply ACL with PBR Globally
After the ACL with PBR is applied globally, all interfaces on the device will have the PBR function.
Table 14-10 Configure to apply the PBR globally
Step
|
Command
|
Description
|
Enter the global configuration mode
|
configure terminal
|
-
|
Configure to apply the PBR globally
|
global ip policy-based-route { access-list-number | access-list-name }
|
Mandatory
By default, the ACL with PBR is not applied globally.
|