policy-based-routing

Note

requires a Product License.

Configure the policy-based routing.

vsr running config# vrf <vrf> routing policy-based-routing

ipv4-rule

Configure an IPv4 rule.

vsr running config# vrf <vrf> routing policy-based-routing
vsr running policy-based-routing# ipv4-rule <0-99999> [not] \
...   match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION \
...   action lookup LOOKUP

<0-99999>

Priority of the rule. High number means lower priority.

not

Invert the match.

not

match

Configure the packet selector.

match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION

inbound-interface

Match this incoming interface.

inbound-interface INBOUND-INTERFACE

INBOUND-INTERFACE

An interface name.

mark

Match this mark filter.

mark MARK

MARK values

Description

<mark>

Firewall mark.

<mark-mask>

Firewall mark filter.

source

Match this source address or prefix.

source SOURCE

SOURCE values

Description

<ipv4-address>

An IPv4 address.

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

destination

Match this destination address or prefix.

destination DESTINATION

DESTINATION values

Description

<ipv4-address>

An IPv4 address.

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

outbound-interface (state only)

Match this outgoing interface.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match outbound-interface

tos (state only)

Match this tos.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match tos

l3vrf (state only)

Match any l3vrf.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match l3vrf

other (state only)

Match a specific attribute.

value (state only)

The value to match.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match other <string> value

action

Configure the action for packets matching the selector.

action lookup LOOKUP

lookup (mandatory)

Lookup in this table.

lookup LOOKUP

LOOKUP values

Description

<uint32>

Table type.

local

High priority control routes for local and broadcast addresses (table 255).

main

Normal routing table, containing all non-policy routes (table 254).

default

Reserved for some post-processing if no previous default rules selected the packet (table 253).

l3vrf-table

Lookup in a l3vrf table (table 0 and l3vrf match).

goto (state only)

Jump to the specified priority rule.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> action goto

other (state only)

Other actions.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> action other

ipv6-rule

Configure an IPv6 rule.

vsr running config# vrf <vrf> routing policy-based-routing
vsr running policy-based-routing# ipv6-rule <0-99999> [not] \
...   match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION \
...   action lookup LOOKUP

<0-99999>

Priority of the rule. High number means lower priority.

not

Invert the match.

not

match

Configure the packet selector.

match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION

inbound-interface

Match this incoming interface.

inbound-interface INBOUND-INTERFACE

INBOUND-INTERFACE

An interface name.

mark

Match this mark filter.

mark MARK

MARK values

Description

<mark>

Firewall mark.

<mark-mask>

Firewall mark filter.

source

Match this source address or prefix.

source SOURCE

SOURCE values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

destination

Match this destination address or prefix.

destination DESTINATION

DESTINATION values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

outbound-interface (state only)

Match this outgoing interface.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match outbound-interface

tos (state only)

Match this tos.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match tos

l3vrf (state only)

Match any l3vrf.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match l3vrf

other (state only)

Match a specific attribute.

value (state only)

The value to match.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match other <string> value

action

Configure the action for packets matching the selector.

action lookup LOOKUP

lookup (mandatory)

Lookup in this table.

lookup LOOKUP

LOOKUP values

Description

<uint32>

Table type.

local

High priority control routes for local and broadcast addresses (table 255).

main

Normal routing table, containing all non-policy routes (table 254).

default

Reserved for some post-processing if no previous default rules selected the packet (table 253).

l3vrf-table

Lookup in a l3vrf table (table 0 and l3vrf match).

goto (state only)

Goto to the specified priority rule.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> action goto

other (state only)

Other actions.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> action other