policy-based-routing¶

Note

requires a Product License.

Configure the policy-based routing.

vsr running config# vrf <vrf> routing policy-based-routing

ipv4-rule¶

Configure an IPv4 rule.

vsr running config# vrf <vrf> routing policy-based-routing
vsr running policy-based-routing# ipv4-rule <0-99999> [not] \
...   match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION \
...   action lookup LOOKUP

<0-99999>

Priority of the rule. High number means lower priority.

not¶

Invert the match.

not

match¶

Configure the packet selector.

match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION

inbound-interface¶

Match this incoming interface.

inbound-interface INBOUND-INTERFACE

INBOUND-INTERFACE

An interface name.

mark¶

Match this mark filter.

mark MARK

`MARK` values	Description
`<mark>`	Firewall mark.
`<mark-mask>`	Firewall mark filter.

source¶

Match this source address or prefix.

source SOURCE

`SOURCE` values	Description
`<ipv4-address>`	An IPv4 address.
`<ipv4-prefix>`	An IPv4 prefix: address and CIDR mask.

destination¶

Match this destination address or prefix.

destination DESTINATION

`DESTINATION` values	Description
`<ipv4-address>`	An IPv4 address.
`<ipv4-prefix>`	An IPv4 prefix: address and CIDR mask.

outbound-interface (state only)¶

Match this outgoing interface.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match outbound-interface

tos (state only)¶

Match this tos.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match tos

l3vrf (state only)¶

Match any l3vrf.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match l3vrf

other (state only)¶

Match a specific attribute.

value (state only)¶

The value to match.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match other <string> value

action¶

Configure the action for packets matching the selector.

action lookup LOOKUP

lookup (mandatory)¶

Lookup in this table.

lookup LOOKUP

`LOOKUP` values	Description
`<uint32>`	Table type.
`local`	High priority control routes for local and broadcast addresses (table 255).
`main`	Normal routing table, containing all non-policy routes (table 254).
`default`	Reserved for some post-processing if no previous default rules selected the packet (table 253).
`l3vrf-table`	Lookup in a l3vrf table (table 0 and l3vrf match).

goto (state only)¶

Jump to the specified priority rule.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> action goto

other (state only)¶

Other actions.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> action other

ipv6-rule¶

Configure an IPv6 rule.

vsr running config# vrf <vrf> routing policy-based-routing
vsr running policy-based-routing# ipv6-rule <0-99999> [not] \
...   match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION \
...   action lookup LOOKUP

<0-99999>

Priority of the rule. High number means lower priority.

not¶

Invert the match.

not

match¶

Configure the packet selector.

match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION

inbound-interface¶

Match this incoming interface.

inbound-interface INBOUND-INTERFACE

INBOUND-INTERFACE

An interface name.

mark¶

Match this mark filter.

mark MARK

`MARK` values	Description
`<mark>`	Firewall mark.
`<mark-mask>`	Firewall mark filter.

source¶

Match this source address or prefix.

source SOURCE

`SOURCE` values	Description
`<ipv6-address>`	An IPv6 address.
`<ipv6-prefix>`	An IPv6 prefix: address and CIDR mask.

destination¶

Match this destination address or prefix.

destination DESTINATION

`DESTINATION` values	Description
`<ipv6-address>`	An IPv6 address.
`<ipv6-prefix>`	An IPv6 prefix: address and CIDR mask.

outbound-interface (state only)¶

Match this outgoing interface.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match outbound-interface

tos (state only)¶

Match this tos.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match tos

l3vrf (state only)¶

Match any l3vrf.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match l3vrf

other (state only)¶

Match a specific attribute.

value (state only)¶

The value to match.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match other <string> value

action¶

Configure the action for packets matching the selector.

action lookup LOOKUP

lookup (mandatory)¶

Lookup in this table.

lookup LOOKUP

`LOOKUP` values	Description
`<uint32>`	Table type.
`local`	High priority control routes for local and broadcast addresses (table 255).
`main`	Normal routing table, containing all non-policy routes (table 254).
`default`	Reserved for some post-processing if no previous default rules selected the packet (table 253).
`l3vrf-table`	Lookup in a l3vrf table (table 0 and l3vrf match).

goto (state only)¶

Goto to the specified priority rule.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> action goto

other (state only)¶

Other actions.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> action other