H3C Technologies H3C SecPath F1000-E User Manual
Page 864
839
[SecPathA-pbr6-aaa-5] apply ipv6-address next-hop 1::2
[SecPathA-pbr6-aaa-5] quit
# Apply policy aaa on GigabitEthernet 0/1.
[SecPathA] interface gigabitethernet 0/1
[SecPathA-GigabitEthernet0/1] ipv6 address 10::2 64
[SecPathA-GigabitEthernet0/1] undo ipv6 nd ra halt
[SecPathA-GigabitEthernet0/1] ripng 1 enable
[SecPathA-GigabitEthernet0/1] ipv6 policy-based-route aaa
[SecPathA-GigabitEthernet0/1] quit
2.
Configure SecPath B:
# Configure RIPng.
<SecPathB> system-view
[SecPathB] ipv6
[SecPathB] ripng 1
[SecPathB-ripng-1] quit
[SecPathB] interface GigabitEthernet 0/1
[SecPathB-GigabitEthernet0/1] ipv6 address 1::2 64
[SecPathB-GigabitEthernet0/1] ripng 1 enable
[SecPathB-GigabitEthernet0/1] quit
3.
Configure SecPath C:
# Configure RIPng.
<SecPathC> system-view
[SecPathC] ipv6
[SecPathC] ripng 1
[SecPathC-ripng-1] quit
[SecPathC] interface GigabitEthernet 0/1
[SecPathC-GigabitEthernet0/1] ipv6 address 2::2 64
[SecPathC-GigabitEthernet0/1] ripng 1 enable
[SecPathC-GigabitEthernet0/1] quit
4.
Verify the configuration:
Enable IPv6 on Host A and configure the IPv6 address of Host A as 10::3.
C:\>ipv6 install
Installing...
Succeeded.
C:\>ipv6 adu 4/10::3
On Host A, telnet to SecPath B (1::2) that is directly connected to SecPath A. The operation
succeeds.
On Host A, telnet to SecPath C (2::2) that is directly connected to SecPath A. The operation fails.
Ping SecPath C from Host A. The operation succeeds.
Telnet uses TCP, and ping uses ICMP. The preceding results show that all TCP packets received on
interface GigabitEthernet 0/1 of SecPath A are forwarded via GigabitEthernet 0/3, and other
packets are forwarded via GigabitEthernet 0/2. The PBR configuration is effective.