09.12.2012 Views

Understanding the network.pdf - Back to Home

Understanding the network.pdf - Back to Home

Understanding the network.pdf - Back to Home

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

oute-map identifier, which associates <strong>the</strong> route-map with <strong>the</strong> policy route<br />

statement.<br />

Policy routes, like ACLs, use deny as <strong>the</strong>ir implicit action. If no action statement is<br />

declared, <strong>the</strong> map sequence will be interpreted as a deny action.<br />

The sequence number serves two roles:<br />

• Sequence identification<br />

• Sequence order<br />

Route-map statements can be entered in any order, but <strong>the</strong>y will be processed and<br />

matched in sequence, starting with <strong>the</strong> lowest-numbered statement. When building<br />

map statements, it is not a bad idea <strong>to</strong> leave numbers between statements (like old<br />

BASIC programming) so if you want <strong>to</strong> add a statement later you can just slide it in.<br />

Let's create a simple map <strong>to</strong> redirect Web traffic <strong>to</strong> a Web cache server:<br />

jung(config)#route-map http permit 10<br />

jung(config-route-map)#match ip address 113<br />

jung(config-route-map)#set ip next-hop 172.16.84.2<br />

NOTE<br />

The deny action has a different effect depending on <strong>the</strong> application of <strong>the</strong> route-map.<br />

If <strong>the</strong> map is being applied as a policy route and a datagram matches a deny<br />

statement, <strong>the</strong> datagram is processed normally (outside of <strong>the</strong> policy route). If <strong>the</strong><br />

map is used for filtering a route redistribution, a deny match will not redistributed.<br />

In <strong>the</strong> example above, <strong>the</strong> route-map<br />

configuration subcommand is used <strong>to</strong> reference ACL 113 for matching criteria. TCP<br />

packets that meet this criterion are forwarded <strong>to</strong> <strong>the</strong> Web cache server with <strong>the</strong> IP<br />

address of 172.16.84.2. All o<strong>the</strong>r traffic is implicitly denied—in o<strong>the</strong>r words, is<br />

routed normally. The opera<strong>to</strong>r is used <strong>to</strong> define policy route<br />

matching criteria. Table 9.8 lists <strong>the</strong> set opera<strong>to</strong>rs available for use with policy<br />

routing.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!