policy-based-routing

Note

requires a Product License.

Configure the policy-based routing.

vsr running config# vrf <vrf> routing policy-based-routing

ipv4-rule

Configure an IPv4 rule.

vsr running config# vrf <vrf> routing policy-based-routing
vsr running policy-based-routing# ipv4-rule <0-99999> [not] \
...   match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION \
...   action lookup LOOKUP

<0-99999>

Priority of the rule. High number means lower priority.

not

Invert the match.

not

match

Configure the packet selector.

match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION

inbound-interface

Match this incoming interface.

inbound-interface INBOUND-INTERFACE

INBOUND-INTERFACE

An interface name.

mark

Match this mark filter.

mark MARK

MARK values

Description

<mark>

Firewall mark.

<mark-mask>

Firewall mark filter.

source

Match this source address or prefix.

source SOURCE

SOURCE values

Description

<ipv4-address>

An IPv4 address.

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

destination

Match this destination address or prefix.

destination DESTINATION

DESTINATION values

Description

<ipv4-address>

An IPv4 address.

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

outbound-interface (state only)

Match this outgoing interface.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match outbound-interface

tos (state only)

Match this tos.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match tos

l3vrf (state only)

Match any l3vrf.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match l3vrf

other (state only)

Match a specific attribute.

value (state only)

The value to match.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> match other <string> value

action

Configure the action for packets matching the selector.

action lookup LOOKUP

lookup (mandatory)

Lookup in this table.

lookup LOOKUP

LOOKUP

Table type.

goto (state only)

Jump to the specified priority rule.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> action goto

other (state only)

Other actions.

vsr> show state vrf <vrf> routing policy-based-routing ipv4-rule <0-99999> action other

ipv6-rule

Configure an IPv6 rule.

vsr running config# vrf <vrf> routing policy-based-routing
vsr running policy-based-routing# ipv6-rule <0-99999> [not] \
...   match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION \
...   action lookup LOOKUP

<0-99999>

Priority of the rule. High number means lower priority.

not

Invert the match.

not

match

Configure the packet selector.

match inbound-interface INBOUND-INTERFACE mark MARK source SOURCE destination DESTINATION

inbound-interface

Match this incoming interface.

inbound-interface INBOUND-INTERFACE

INBOUND-INTERFACE

An interface name.

mark

Match this mark filter.

mark MARK

MARK values

Description

<mark>

Firewall mark.

<mark-mask>

Firewall mark filter.

source

Match this source address or prefix.

source SOURCE

SOURCE values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

destination

Match this destination address or prefix.

destination DESTINATION

DESTINATION values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

outbound-interface (state only)

Match this outgoing interface.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match outbound-interface

tos (state only)

Match this tos.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match tos

l3vrf (state only)

Match any l3vrf.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match l3vrf

other (state only)

Match a specific attribute.

value (state only)

The value to match.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> match other <string> value

action

Configure the action for packets matching the selector.

action lookup LOOKUP

lookup (mandatory)

Lookup in this table.

lookup LOOKUP

LOOKUP

Table type.

goto (state only)

Goto to the specified priority rule.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> action goto

other (state only)

Other actions.

vsr> show state vrf <vrf> routing policy-based-routing ipv6-rule <0-99999> action other