15-100
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 15 Configuring Access Control
Configuring Policy-Based Forwarding
MS-Windows/NT/2000 Hosts
You must set the static ARP entries on Windows-based PCs. For Windows-based PCs, you do not need
to set up any dummy gateways for switching between the VLANs with PBF.
This example shows how to configure the static ARP entries in Windows-based platforms:
C:\> arp -s 11.0.0.1 00-11-11-11-11-11
In this example, 00-11-11-11-11-11 is the PBF MAC address and 11.0.0.1 is the IP address of the
destination host.
If you need to configure more hosts, you can create a batch file with the ARP entries to each destination
host and specify that Windows use this file at startup.
PBF Configuration Example
This section provides the example configurations to enable PBF between the hosts on VLAN 1 and the
hosts on VLAN 2 (see Figure 15-11).
Figure 15-11 Policy-Based Forwarding Configuration Example
This example shows the switch configuration file that was created to enable PBF between the hosts on
VLAN 1 and VLAN 2. Only the first four hosts from each VLAN are shown in the example (44.0.0.1
through 44.0.0.4 and 43.0.0.1 through 43.0.0.4).
#security ACLs
clear security acl all
#adj set
set security acl adjacency a_1 2 00-0a-0a-0a-0a-0a
set security acl adjacency a_2 2 00-0a-0a-0a-0a-0b
set security acl adjacency a_3 2 00-0a-0a-0a-0a-0c
set security acl adjacency a_4 2 00-0a-0a-0a-0a-0d
set security acl adjacency b_1 1 00-20-20-20-20-20
set security acl adjacency b_2 1 00-20-20-20-20-21
set security acl adjacency b_3 1 00-20-20-20-20-22
set security acl adjacency b_4 1 00-20-20-20-20-23
#ip1
To Next Page
Loading...
Need help?
General