ACL Filter Policy Overview
496 Router Configuration Guide
• When the timer value is changed, the new value takes immediate effect and the timer
is restarted with the new value (or expired if no-hold-time-up is configured)
Operational note: unicast-rt-test will fail when performed in the context of a VPRN routing
instance when the destination is routable only through grt-leak functionality. ping-test is
recommended in such cases.
Feature caveats:
• Redirect policy is supported for ingress IPv4 and IPv6 filter policies only.
• SNMP and URL tests are not supported for IPv6.
• Different platforms support different scale for redirect policies. Please contact your
local Alcatel-Lucent representative to ensure the planned deployment does not
exceed recommended scale.
Router Instance Support for Redirect Policies
There are two modes of deploying redirect policies on VPRN interfaces. The functionality
supported depends on the configuration of redirect-policy router option with
(config>filter>redirect-policy>router):
• Redirect policy with router option enabled (recommended):
→ When a PBR destination is up, the PBR lookup is performed in the redirect
policy's configured routing instance. When that instance differs from the
incoming interface where the filter policy using the given redirect policy is
deployed, the PBR action is equivalent to forward next-hop router filter policy
action.
→ When all PBR destinations are down (or a given hardware does not support
action router), action forward is programmed and the PBR lookup is performed
in the routing instance of the incoming interface where the filter policy using the
given redirect policy is deployed.
→ Any destination tests configured are executed in the routing context specified by
the redirect-policy.
→ Changing router configuration for a redirect policy, brings all destinations with
a test configured down. The destinations are brought up once the test confirm
reachability based on the new redirect policy router configuration.
• Redirect policy without router option disabled (no router) or with router options not
supported (legacy):
→ When a PBR destination is up, the PBR lookup is performed in the routing
instance of the incoming interface where the filter policy using the given redirect
policy is deployed.
To Next Page
Loading...
