Alcatel 9000 Guía de usuario descargar pdf (Pagina 562)

100

101

Policy Applications Configuring QoS

page 26-56 OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Policy Based Routing

Policy Based Routing (PBR) allows a network administrator to define QoS policies that will override the

normal routing mechanism for traffic matching the policy condition.

Note. When a PBR QoS rule is applied to the configuration, it is applied to the entire switch, unless you

specify a built-in port group in the policy condition.

Policy Based Routing may be used to redirect traffic to a particular gateway based on source or destina-

tion IP address, source or destination network group, source or destination TCP/UDP port, a service or

service group, IP protocol, or built-in source port group.

Traffic may be redirected to a particular gateway regardless of what routes are listed in the routing table.

Note that the gateway address does not have to be on a directly connected VLAN; the address may be on

any network that is learned by the switch.

Note. If the routing table has a default route of 0.0.0.0, traffic matching a PBR policy will be redirected to

the route specified in the policy. For information about viewing the routing table, see Chapter 12, “Config-

uring IP.”

Policy Based Routing may be used to redirect untrusted traffic to a firewall. In this case, note that reply

packets will be not be allowed back through the firewall.

In this example, all traffic originating in the 10.3 network is routed through the firewall, regardless of

whether or not a route exists.

-> policy condition Traffic3 source ip 10.3.0.0 mask 255.255.0.0

-> policy action Firewall permanent gateway ip 173.5.1.254

-> policy rule Redirect_All condition Traffic3 action Firewall

Note that the functionality of the firewall is important. In the example, the firewall is sending the traffic to

be routed remotely. If you instead set up a firewall to send the traffic back to the switch to be routed, you

should set up the policy condition with a built-in source port group so that traffic coming back from the

firewall will not get looped and sent back out to the firewall.

OmniSwitch

Routing all IP source traffic through a firewall

10.3.0.0

173.5.1.0

173.10.2.0

174.26.1.0

Firewall

173.5.1.254

1 2 ... 557 558 559 560 561 562 563 564 565 566 567 ... 701 702

Comentarios a estos manuales

Sin comentarios

Alcatel 9000 Guía de usuario Pagina 562

Comentarios a estos manuales

Relacionado con productos y manuales para Software Alcatel 9000