Configuration examples, Basic example, Combined example – Brocade Multi-Service IronWare Routing Configuration Guide (Supporting R05.6.00) User Manual
Page 794: Selectively applying normal routing to packets
766
Multi-Service IronWare Routing Configuration Guide
53-1003033-02
Configuration examples
Configuration examples
This section presents configuration examples for:
•
•
•
“Selectively applying normal routing to packets”
Basic example
The following commands configure and apply an IPv6 PBR policy that routes HTTP traffic received
on a virtual routing interface.
Brocade(config)# route-map v6pbr permit 10
Brocade(config-routemap v6pbr)#match ipv6 address v6acl
Brocade(config-routemap v6pbr)#set ipv6 next-hop 2001:db8::1
Combined example
If both IPv4 and IPv6 configurations exist in a route map, the IPv4 portions of the route map will be
ignored when the route map is used for IPv6 PBR, and the IPv6 portions of the route map will be
ignored when the route map is used for IPv4 PBR.
In the following example the IPv4 traffic that matches the route map will be sent to 10.1.1.1 and
IPv6 traffic that matches the route map will be sent to 2001:db8::1.
Brocade(config)# interface ethernet 1/2
Brocade(config-route-map)# ip address 10.1.1.1/24
Brocade(config-route-map)# ip policy route-map ipv6_pbr_map
Brocade(config-route-map)# ipv6 address 2001:db8::1/64
Brocade(config-route-map)# ipv6 policy route-map ipv6_pbr_map
Selectively applying normal routing to packets
Certain situations demand selected traffic to undergo normal routing based on IPv6 RTM while
other traffic is to be forwarded based on PBR. One such situation is provided in the following
scenario. The example provides a recommended solution.
To communicate with a direct connected host, the IPv6 address has to be resolved. To resolve the
IPv6 address, an ICMPv6 Neighbor Solicitation (NS) will be sent and an ICMPv6 Neighbor
Advertisement (NA) is expected as a reply. If the match ACL rules matches the IPv6 address of
ICMPv6 NA, as per the PBR route map, it will be redirected to the first reachable next hop and the
IPv6 address is not resolved. This results in packets being dropped. To avoid this situation, use the
deny ACL clause to selectively allow ICMP traffic and define it as a permit route map entry, as
shown in the following example.
Brocade(config)#
Brocade(config)#ipv6 access-list v6acl
Brocade(config-ipv6-access-list v6acl)#deny icmp 2001:db8::/64 any
Brocade(config-ipv6-access-list v6acl)#permit ipv6 2001:db8::/64 any
Brocade(config-ipv6-access-list v6acl)#
Brocade(config-ipv6-access-list v6acl)#route-map v6pbr permit 10
Brocade(config-routemap v6pbr)#match ipv6 address v6acl