Policy Based Route-Map Example

The following example:

• Creates a policy based route-map name rmP1 that filters IP packets with source addresses on the 60.10.0.0 subnet destined for hosts 50.10.0.1-2.
• Packets that pass this filter will be routed using one of three next hops: 30.10.0.10, 30.10.0.20, or 30.10.0.30.
• The route-map probe feature is configured to monitor these three next hops for availability using the default policy based routing probe $pbr_default.
• The route-map is assigned to VLAN 110.
• Policy priority is set such that only the policy route lookup will determine the route, and if not available, the packet will be dropped (S-, K-Series).
• The load-policy is set to round-robin (S-, K-Series).

  System(rw)->configure
  System(rw-config)->ip access-list extended 101
  System(rw-cfg-ext-acl)->permit ip 60.10.0.0 0.0.255.255 host 50.10.0.1
  System(rw-cfg-ext-acl)->permit ip 60.10.0.0 0.0.255.255 host 50.10.0.2
  System(rw-cfg-ext-acl)->deny ip any any
  System(rw-cfg-ext-acl)->show access-lists 101
  Extended IP access list 101  (4 entries)
    1 permit ip  60.10.0.0  0.0.255.255  host 50.10.0.1
    2 permit ip  60.10.0.0  0.0.255.255  host 50.10.0.2
    3 deny   ip  any  any
    -- implicit deny all --
  System(rw-cfg-ext-acl)->exit
  System(rw-config)->route-map policy rmP1 permit 10
  System(rw-config-route-map-pbr)->match ip address 101
  System(rw-config-route-map-pbr)->set next-hop 30.10.0.10 30.10.0.20 30.10.0.30
  System(rw-config-route-map-pbr)->exit
  System(rw-config)->show route-map rmP1
   route-map policy rmP1 permit 10
    match ip address 101
    set next-hop 30.10.0.10 30.10.0.20 30.10.0.30
   Policy matches: 0 packets
  System(rw-config)->route-map probe 30.10.0.10 default
  System(rw-config)->route-map probe 30.10.0.20 default
  System(rw-config)->route-map probe 30.10.0.30 default

On the S-and K- only, set the policy priority and load policy for VLAN 110:

System(rw-config)->interface vlan 110
System(rw-config-intf-vlan.0.110)->ip policy priority only
System(rw-config-intf-vlan.0.110)->ip policy load-policy round-robin
System(rw-config-intf-vlan.0.110)->ip policy route-map rmP1
System(rw-config-intf-vlan.0.110)->show ip policy
Interface    Route map                        Priority Load policy  Match count
-----------  -------------------------------- -------- ------------ ----------
vlan.0.110   rmP1                             Only     Round Robin  0
System(rw-config-intf-vlan.0.110)->exit
System(rw-config)->