376
[SwitchA] vlan 20
[SwitchA-vlan20] quit
# Configure the IP addresses of VLAN-interface 10 and VLAN-interface 20.
[SwitchA] interface vlan-interface 10
[SwitchA-Vlan-interface10] ip address 1.1.2.1 24
[SwitchA-Vlan-interface10] quit
[SwitchA] interface vlan-interface 20
[SwitchA-Vlan-interface20] ip address 1.1.3.1 24
[SwitchA-Vlan-interface20] quit
# Configure ACL 3101 to match TCP packets.
[SwitchA] acl advanced 3101
[SwitchA-acl-ipv4-adv-3101] rule permit tcp
[SwitchA-acl-ipv4-adv-3101] quit
# Configure Node 5 for the policy aaa to forward TCP packets to next hop 1.1.2.2.
[SwitchA] policy-based-route aaa permit node 5
[SwitchA-pbr-aaa-5] if-match acl 3101
[SwitchA-pbr-aaa-5] apply next-hop 1.1.2.2
[SwitchA-pbr-aaa-5] quit
# Configure interface PBR by applying the policy aaa to VLAN-interface 11.
[SwitchA] interface vlan-interface 11
[SwitchA-Vlan-interface11] ip address 10.110.0.10 24
[SwitchA-Vlan-interface11] ip policy-based-route aaa
[SwitchA-Vlan-interface11] quit
Verifying the configuration
# On Host A, Telnet to Switch B that is directly connected to Switch A. The operation succeeds.
(Details not shown.)
# On Host A, Telnet to Switch C that is directly connected to Switch A. The operation fails. (Details
not shown.)
# Ping Switch C from Host A. The operation succeeds. (Details not shown.)
Telnet uses TCP, and ping uses ICMP. The results show the following:
• All TCP packets arriving on VLAN-interface 11 of Switch A are forwarded to next hop 1.1.2.2.
• Other packets are forwarded through VLAN-interface 20.
• The interface PBR configuration is effective.
To Next Page
Loading...
Need help?
General