Typical configurations of AR28/AR46 series routers based on source address Policy Routing

AR28/AR46 series routers control all TCP packets received from interfaces E3/0/0 on the basis of the typical configuration of the source address policy routing [requirement, the serial port serial1/0/0 is used to send other messages. Other messages are still forwarded by searching the route table. Node 5 indicates that Ethernet packets matching acl 3101 will be sent to the serial serial1/0/0; node 10 indicates that any packets matching acl 3102 will not be processed by the policy route. Packets from Ethernet3/0/0 attempt to match the if-match clause of node 5 and node 10 in sequence. If the node matches the permit statement, execute the apply clause. If the node matches the deny statement, exit the routing rule. Configuration script Router configuration script [Quidway] firewall default deny [Quidway] acl number 3101 [Quidway-acl-adv-3101] rule permit tcp [Quidway-acl-adv-3101] quit [Quidway] acl number 3102 [Quidway-acl-adv-3102] rule permit ip [Quidway-acl-adv-3102] quit [Quidway] route-policy aaa permit node 5 [Quidway-route-policy] if-match acl 3101 [Quidway-route-policy] apply output-interface serial 1/0 /0 [Quidway-route-policy] quit // defines node 5, send any TCP packet that matches acl 3101 to the serial port serial 1/0/0 [Quidway] route-policy aaa deny node 10 [Quidway-route-policy] if-match acl 3102 [Quidway- route-policy] quit // defines node 10, indicates that packets matching acl 3102 are not routed by policy [Quidway] interface ethernet 3/0/0 [Quidway-Ethernet3/0/0] ip policy route-policy aaa // apply policy aaa on ethernet ports