H3C Technologies H3C SR8800 - Manual (Page 281)

265
Configuring policy-based routing
Introduction to policy-based routing
What is policy-based routing
Policy-based routing (PBR) is a routing mechanism based on user-defined policies. Different from the
traditional destination-based routing mechanism, PBR enables you to use a policy to route packets based
on the source address, packet length, and other criteria. You can specify the VPN instance, packet
priority, outgoing interface, next hop, default outgoing interface, default next hop, and other parameters
to guide the forwarding of packets that match specific ACLs or have specific lengths.
PBR involves local PBR and interface PBR.
• Local PBR applies to locally generated packets only, such as the ICMP packets generated by using
the ping command.
• Interface PBR applies to packets forwarded through the interface only.
In most cases, interface PBR is implemented to meet the forwarding and security requirements.
In general, PBR takes precedence over destination-based routing. PBR applies to the packets matching
the specified criteria, and other packets are forwarded through destination-based routing. However, if
PBR has a default outgoing interface (next hop) configured, destination-based routing takes precedence
over PBR.
Policy
A policy that comprises one or multiple nodes is used to route IP packets.
Node
A node is identified by a node number. The node with the smallest node number has the highest priority.
A policy node consists of if-match and apply clauses. An if-match clause specifies a match criterion on
a node, and an apply clause specifies an action to be taken on packets.
The action to be taken on matched packets depends on the match mode, which can be permit or deny.
if-match clause
The following type of if-match clause is available: if-match acl.
You can specify only one if-match clause in a policy node.
apply clause
Table 6 describes the following types of apply clauses.