Network requirements – H3C Technologies H3C SecPath F1000-E User Manual
Page 862
837
Trying 1::2 ...
Press CTRL+K to abort
Connected to 1::2 ...
******************************************************************************
* Copyright (c) 2004-2011 Hangzhou H3C Tech. Co., Ltd. All rights reserved. *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
# Telnet to SecPath C (2::2/64) from SecPath A. The operation fails.
Trying 2::2 ...
Press CTRL+K to abort
Can't connect to the remote host!
# Ping SecPath C (2::2/64) from SecPath A. The operation succeeds.
PING 2::2 : 56 data bytes, press CTRL_C to break
Reply from 2::2
bytes=56 Sequence=1 hop limit=64 time = 4 ms
Reply from 2::2
bytes=56 Sequence=2 hop limit=64 time = 2 ms
Reply from 2::2
bytes=56 Sequence=3 hop limit=64 time = 2 ms
Reply from 2::2
bytes=56 Sequence=4 hop limit=64 time = 2 ms
Reply from 2::2
bytes=56 Sequence=5 hop limit=64 time = 2 ms
--- 2::2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/4 ms
Telnet uses TCP, and ping uses ICMP. The preceding results show that all TCP packets of SecPath
A are forwarded via GigabitEthernet 0/1, and packets except TCP packets are forwarded via
GigabitEthernet 0/2. The PBR configuration is effective.
Configuring IPv6 interface PBR based on packet type
Network requirements
As shown in
, configure PBR on SecPath A, so that TCP packets arriving on the interface
GigabitEthernet 0/1 are forwarded via GigabitEthernet 0/3 and other IPv6 packets are forwarded
according to the routing table.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer