Configure an Egress Policy

Follow this procedure to prepare packets for actions to be performed when leaving the 9920.

Procedure

  1. Run the configure terminal command to access Config mode.
    configure terminal
    The command line changes to configuration mode.
    device(config)# 
  2. Configure an ACL of type IPv4, IPv6, or MAC and any actions.
    ip access-list acl-name

    The specified ACL and configured actions will be bound to a listener policy.

    device(config)# ip access-list acl5-ipv4
    device(config-ip-acl)# seq 15 permit ip any any count
  3. Create the listener policy, including any action subcommands for the policy.
    Note

    Note

    A listener policy supports only one of each of each ACL type: IP, IPv6, MAC .
    listener-policy name seq
    device(config)# listener-policy lp-2 220
    device(config-listener-policy)# match ip access-list acl5-ipv4
    device(config-listener-policy)# strip vn-tag
    device(config-listener-policy)# description “ABCD”
  4. Configure an egress policy, and bind the listener policy, specifying any additional egress actions.
    Note

    Note

    An egress can be associated with only one listener policy.
    egress name
    device(config-egress)# egress e2
    device(config-egress)# set listener-policy lp-2
    device(config-egress)# description DirectTool
    device(config-egress)# set encap encap-1 
    device(config-egress)# precedence 1 interface ethernet 2/14
  5. Configure the interface port and channel for egress traffic.
    interface slot / port-number
    Note

    Note

    In the following example, traffic is leaving on slot/port-number 2/14.
    interface ethernet 2/14
    speed 100000
    description To_Tool
    no shutdown