Configuring ipv6 pbr, Defining an ipv6 policy – H3C Technologies H3C SecPath F1000-E User Manual
Page 858
833
Clause Meaning Priority
apply default
output-interface and
apply ipv6-address
default next-hop
Sets the default outgoing
interface and default next
hop
The apply default output-interface clause takes
precedence over the apply ipv6-address default
next-hop clause. Only the apply default
output-interface clause is executed when both are
configured.
They take effect only when no outgoing interface or
next hop is defined for packets, or the defined outgoing
interface or next hop is invalid and the destination
address does not match any route in the routing table.
Configuring IPv6 PBR
Defining an IPv6 policy
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create an IPv6 policy or IPv6
policy node and enter IPv6
PBR policy node view.
ipv6 policy-based-route policy-name
[ deny | permit ] node node-number Not created by default.
3.
Define an IPv6 packet length
match criterion.
if-match packet-length min-len
max-len
Optional.
4.
Define an IPv6 ACL match
criterion.
if-match acl6 acl6-number Optional.
5.
Set a preference type or value
for permitted IPv6 packets.
apply ipv6-precedence { type |
value }
Optional.
6.
Set an outgoing interface for
permitted IPv6 packets.
apply output-interface interface-type
interface-number
Optional.
You can define five outgoing
interfaces at most for load
balancing.
7.
Set a next hop for permitted
IPv6 packets.
apply ipv6-address next-hop
ipv6-address
Optional.
You can define five next hops at
most for load balancing.
8.
Set a default outgoing
interface for permitted IPv6
packets.
apply default output-interface
interface-type interface-number
Optional.
You can define five default
outgoing interfaces at most for
load balancing.
9.
Set a default next hop for
permitted IPv6 packets.
apply ipv6-address default next-hop
ipv6-address
Optional.
You can define five default next
hops at most for load balancing.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer