beautypg.com

Configuration examples, Basic example, Combined example – Brocade Multi-Service IronWare Routing Configuration Guide (Supporting R05.6.00) User Manual

Page 794: Selectively applying normal routing to packets

background image

766

Multi-Service IronWare Routing Configuration Guide

53-1003033-02

Configuration examples

Configuration examples

This section presents configuration examples for:

“Basic example”

on page 766

“Combined example”

on page 766

“Selectively applying normal routing to packets”

on page 766

Basic example

The following commands configure and apply an IPv6 PBR policy that routes HTTP traffic received
on a virtual routing interface.

Brocade(config)# route-map v6pbr permit 10

Brocade(config-routemap v6pbr)#match ipv6 address v6acl

Brocade(config-routemap v6pbr)#set ipv6 next-hop 2001:db8::1

Combined example

If both IPv4 and IPv6 configurations exist in a route map, the IPv4 portions of the route map will be
ignored when the route map is used for IPv6 PBR, and the IPv6 portions of the route map will be
ignored when the route map is used for IPv4 PBR.

In the following example the IPv4 traffic that matches the route map will be sent to 10.1.1.1 and
IPv6 traffic that matches the route map will be sent to 2001:db8::1.

Brocade(config)# interface ethernet 1/2

Brocade(config-route-map)# ip address 10.1.1.1/24

Brocade(config-route-map)# ip policy route-map ipv6_pbr_map

Brocade(config-route-map)# ipv6 address 2001:db8::1/64

Brocade(config-route-map)# ipv6 policy route-map ipv6_pbr_map

Selectively applying normal routing to packets

Certain situations demand selected traffic to undergo normal routing based on IPv6 RTM while
other traffic is to be forwarded based on PBR. One such situation is provided in the following
scenario. The example provides a recommended solution.

To communicate with a direct connected host, the IPv6 address has to be resolved. To resolve the
IPv6 address, an ICMPv6 Neighbor Solicitation (NS) will be sent and an ICMPv6 Neighbor
Advertisement (NA) is expected as a reply. If the match ACL rules matches the IPv6 address of
ICMPv6 NA, as per the PBR route map, it will be redirected to the first reachable next hop and the
IPv6 address is not resolved. This results in packets being dropped. To avoid this situation, use the
deny ACL clause to selectively allow ICMP traffic and define it as a permit route map entry, as
shown in the following example.

Brocade(config)#

Brocade(config)#ipv6 access-list v6acl

Brocade(config-ipv6-access-list v6acl)#deny icmp 2001:db8::/64 any

Brocade(config-ipv6-access-list v6acl)#permit ipv6 2001:db8::/64 any

Brocade(config-ipv6-access-list v6acl)#

Brocade(config-ipv6-access-list v6acl)#route-map v6pbr permit 10

Brocade(config-routemap v6pbr)#match ipv6 address v6acl