beautypg.com

If-match clause, Apply clause, Configuring ipv6 pbr – H3C Technologies H3C SR8800 User Manual

Page 402: Defining an ipv6 policy

background image

386

NOTE:

If a policy has a node with no if-match clause configured, all packets can pass the policy node.
However, an action is taken according to the match mode, and the packets will not go to the next policy
node for a match.

If a policy has a node with the permit match mode but no apply clause configured, all packets matching
all the if-match clauses can pass the policy node. However, no action is taken, the packets will not go to

the next policy node for a match, and will be forwarded according to the routing table.

If a policy has a node with no if-match or apply clauses configured, all packets can pass the policy
node. However, no action is taken; the packets will not go to the next policy node for a match, and will

be forwarded according to the routing table.

The nodes of a policy are in an OR relationship. If a packet matches a node, it passes the policy; if the

packet does not match any node of the policy, it fails to pass the policy and is forwarded according to

the routing table.

if-match clause

The following type of if-match clause is available: if-match acl6.
You can specify only one if-match clause in a policy node.

apply clause

Table 9

describes the following types of apply clauses.

Table 9 Priorities of the apply clauses in a policy node

Clause Meaning Priority

apply

ipv6-precedence

Sets an IP precedence.

If configured, this clause will always be executed.

apply

ipv6-address
next-hop

Sets the next hop.

This clause will be executed when the configured

next hop is valid.

NOTE:

If the ARP entry of the specified next hop can be learned, the next hop is considered valid; otherwise, it is
considered invalid.

Configuring IPv6 PBR

Defining an IPv6 policy

To define an IPv6 policy:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Create an IPv6 policy or IPv6
policy node and enter IPv6

PBR policy node view.

ipv6 policy-based-route policy-name
[ deny | permit ] node node-number Not created by default.