Configure an Ingress Policy

Follow this procedure to configure an ingress policy for actions to be performed on packets at ingress.

About this task

At a minimum, you must configure an ingress policy with a route-map with a match statement and a valid ACL.

Note

In the examples that follow the configuration commands for this task, bold font is used to show the relationship between the items you configure and then bind. The example parameters and optional settings are only a partial set of those available. See the Extreme 9920 Software Command Reference, 21.1.0.0 for more information.

1. Run the configure terminal command to access Config mode.
   configure terminal
   The command line changes to configuration mode.

   

   device(config)# 

2. Configure an ACL of type IPv4, IPv6, or MAC and any actions.
   ip access-list acl-name

   The specified ACL and configured actions will be bound to a route map.

   

   device(config)# ipv6 access-list acl2-ipv6
   device(config-ip-acl)# seq 10 permit ipv6 any any count

3. Configure the route map match ipv6 access list and set any other parameters, such as forwarding actions and the egress-group.
   route-map map-name seq

   

   device(config-route-map)# route-map R1 10 
   device(config-route-map)# match ipv6 access-list acl2-ipv6
   device(config-route-map)# set egress-group eg_1
   device(config-route-map)# forward-action permit

4. Configure the interface port and channel for ingress traffic.
   interface slot / port-number

   

   Note

   In the following example, traffic is coming in on slot/port-number 2/3.

   

   interface ethernet 2/3
   description From_TAP
   set ingress-group TAP_TRAFFIC
   no shutdown

5. Add the route map to the ingress group.
   ingress-group group-name

   

   device(config)# ingress-group TAP_TRAFFIC
   device(config-ingress-group)# set route-map R1