Release 15.1SY Supervisor Engine 720 Software Configuration Guide

Step 1

Router(config)# route-map map-tag [ permit | deny ] [ sequence-number ]

Defines a route map to control where packets are output. This command puts the router into route-map configuration mode.

Step 2

Router(config-route-map)# match length min max

Router(config-route-map)# match ip address { access-list-number | name } [...access-list-number | name ]

Specifies the match criteria.

Although there are many route-map matching options, here you can specify only length and/or ip address.

• length matches the Level 3 length of the packet.
• ip address matches the source or destination IP address that is permitted by one or more standard or extended access lists.

If you do not specify a match command, the route map applies to all packets.

Step 3

Router(config-route-map)# set ip precedence [ number | name ]

Router(config-route-map)# set ip df

Router(config-route-map)# set ip vrf vrf_ name

Router(config-route-map)# set ip next-hop ip-address [... ip-address ]

Router(config-route-map)# set ip next-hop recursive ip-address [... ip-address ]

Router(config-route-map)# set interface

interface-type interface-number [... type number ]

Router(config-route-map)# set ip default next-hop ip-address [... ip-address ]

Router(config-route-map)# set default interface interface-type interface-number [... type...number ]

Specifies the action(s) to take on the packets that match the criteria. You can specify any or all of the following:

• precedence: Sets precedence value in the IP header. You can specify either the precedence number or name.
• df: Sets the ‘Don’t Fragment’ (DF) bit in the ip header.
• vrf: Sets the VPN Routing and Forwarding (VRF) instance.
• next-hop: Sets next hop to which to route the packet.
• next-hop recursive : Sets next hop to which to route the packet if the hop is to a router which is not adjacent.
• interface: Sets output interface for the packet.
• default next-hop: Sets next hop to which to route the packet if there is no explicit route for this destination.
• default interface: Sets output interface for the packet if there is no explicit route for this destination.

Step 4

Router(config-route-map)# interface interface-type interface-number

Specifies the interface, and puts the router into interface configuration mode.

Step 5

Router(config-if)# ip policy route-map map-tag

Identifies the route map to use for PBR. One interface can have only one route map tag; but you can have several route map entries, each with its own sequence number. Entries are evaluated in order of their sequence numbers until the first match occurs. If no match occurs, packets are routed as usual.

Router(config)# ip local policy route-map map-tag

Identifies the route map to use for local PBR.

Step 1

enable

Router> enable

Enables privileged EXEC mode.

• Enter your password if prompted.

Step 2

configure terminal

Router# configure terminal

Enters global configuration mode.

Step 3

access-list permit source

Router(config)# access-list 101 permit 10.60.0.0 0.0.255.255

Configures an access list. The example configuration permits any source IP address that falls within the 10.60.0.0. 0.0.255.255 subnet.

Step 4

route-map map-tag

Router(config)# route-map abccomp

Enables policy routing and enters route-map configuration mode.

Step 5

set ip next-hop ip-address

Router(config-route-map)# set ip next-hop 10.10.1.1

Sets a next-hop router IP address.

Note Set this IP address separately from the next-hop recursive router configuration.

Step 6

set ip next-hop { ip-address [...ip-address ] | recursive ip-address}

Router(config-route-map)# set ip next-hop recursive 10.20.3.3

Sets a recursive next-hop IP address.

Note This configuration does not ensure that packets get routed using the recursive IP address if an intermediate IP address is a shorter route to the destination.

Step 7

match ip address access-list-number

Router(config-route-map)# match ip address 101

Sets an access list to be matched.

Step 8

end

Router(config-route-map)# end

Exits route-map configuration mode and returns to privileged EXEC mode.