Policy-based route analysis of the mercury Router

Policy-based routing is a flexible packet forwarding mechanism. By applying a policy route on a router, the router determines how to process the router data packets based on the route ing, the route ing determines the next hop forwarding router of a data packet.
1. To apply a policy route on a vro, you must specify the route ing used by the policy route and create a route ing. A route ing consists of multiple policies. Each policy defines one or more matching rules and corresponding operations. After an interface applies a policy route, all packets received by this interface will be checked. data packets that do not comply with the rules defined in the route ing will be processed according to the normal route forwarding rules, it is processed according to the operation defined in the policy.
2. Policy Routing is mainly used when the enterprise route table is complex or needs to control the route, especially when there are two enterprise network outlets, when you need to control the routes of different services and applications or different clients, the routing policy is often used when the enterprise runs two or more networks. Www.2cto.com
3. In addition to abnormal route selection, policy routing can also be used to prevent attacks by viruses or hackers and match the virus or attack pattern using conditional statements, then, specify a security policy (for example, black hole Routing) to block the attack.
4. Black Hole routing is a supplement to the dynamic routing protocol. Black Hole routing can forward unwanted traffic to an interface called null0. We can create one or more static routes to discard the traffic that exactly matches these routes. Unlike ACL, all switching processes, including CEF, can process black hole routing without compromising performance.
Configure a route ing, match the traffic from the remote user to the internal user, and drag the traffic to the null0 interface. Configure the null0 interface to return the inaccessible information, other traffic that does not match the route ing is forwarded normally.