Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

PDF

Configuration Task List for Policy-based Routing

To enable the PBR:

  • Create a Redirect List
  • Create a Rule for a Redirect-list
  • Create a Track-id list. For complete tracking information, refer to Object Tracking chapter.
  • Apply a Redirect-list to an Interface using a Redirect-group

Create a Redirect List

Use the following command in CONFIGURATION mode:

  1. Create a redirect list by entering the list name. Format: 16 characters

    CONFIGURATION mode

    ip redirect-list redirect-list-name

    Delete the redirect list with the no ip redirect-list command.

The following example creates a redirect list by the name of “xyz.” 

Dell(conf)#ip redirect-list ?
                              WORD   Redirect-list name (max 16 chars)       
                              Dell(conf)#ip redirect-list xyz

Create a Rule for a Redirect-list

Use the following command in CONFIGURATION REDIRECT-LIST mode to set the rules for the redirect list. You can enter the command multiple times and create a sequence of redirect rules. Use the seq nn redirect version of the command to organize your rules .

  1. Configure a rule for the redirect list.

    CONF-REDIRECT-LIST mode

    seq {number} redirect { ip-address}{ ip-protocol-number | protocol-type [ bit]} { source mask | any | host ip-address}{ destination mask | any | host ip-address}

    • number is the number in sequence to initiate this rule
    • ip-address is the Forwarding router’s address
    • FORMAT: A.B.C.D
    • FORMAT: slot/port
    • ip-protocol-number or protocol-type is the type of protocol to be redirected
    • FORMAT: 0-255 for IP protocol number, or enter protocol type
    • source ip-address or any or host ip-address is the Source’s IP address
    • FORMAT: A.B.C.D/NN, or ANY or HOST IP address
    • destination ip-address or any or host ip-address is the Destination’s IP address
    • FORMAT: A.B.C.D/NN, or ANY or HOST IP address

    Delete a rule with the no redirect command.

    The redirect rule supports Non-contiguous bitmasks for PBR in the Destination router IP address

The below step shows a step-by-step example of how to create a rule for a redirect list by configuring:

  • IP address of the next-hop router in the forwarding route
  • IP protocol number
  • Source address with mask information
  • Destination address with mask information

Creating a Rule Example: 

Dell(conf-redirect-list)#redirect ?
                              A.B.C.D                 Forwarding router's address             
                              
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ?
                              <0-255>                 An IP protocol number                   
                              icmp                    Internet Control Message Protocol       
                              ip                      Any Internet Protocol                   
                              tcp                     Transmission Control Protocol           
                              udp                     User Datagram Protocol                  
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ip ?
                              A.B.C.D                 Source address                          
                              any                     Any source host                         
                              host                    A single source host                    
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ip 222.1.1.1 ?
                              Mask                  A.B.C.D or /nn Mask in dotted decimal or in slash format
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ip 222.1.1.1 /32 ?
                              A.B.C.D                 Destination address                     
                              any                     Any destination host                    
                              host                    A single destination host               
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ip 222.1.1.1 /32 77.1.1.1 ?
                              Mask                  A.B.C.D or /nn Mask in dotted decimal or in slash format
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ip 222.1.1.1 /32 77.1.1.1 /32 ?
                              Dell(conf-redirect-list)#redirect 3.3.3.3 ip 222.1.1.1 /32 77.1.1.1 /32 
                              Dell(conf-redirect-list)#do show ip redirect-list 
                              
                              IP redirect-list xyz:
                              Defined as:
                              seq 5 redirect 3.3.3.3 ip host 222.1.1.1 host 77.1.1.1
                              Applied interfaces:
                              None

Multiple rules can be applied to a single redirect-list. The rules are applied in ascending order, starting with the rule that has the lowest sequence number in a redirect-list displays the correct method for applying multiple rules to one list.

Creating multiple rules for a redirect-list: 

Dell(conf)#ip redirect-list test
                              Dell(conf-redirect-list)#seq 10 redirect 10.1.1.2 ip 20.1.1.0/24 any
                              Dell(conf-redirect-list)#seq 15 redirect 10.1.1.3 ip 20.1.1.0/25 any
                              Dell(conf-redirect-list)#seq 20 redirect 10.1.1.3 ip 20.1.1.128/24 any
                              Dell(conf-redirect-list)#show config
                              !
                              ip redirect-list test
                              seq 10 redirect 10.1.1.2 ip 20.1.1.0/24 any
                              seq 15 redirect 10.1.1.3 ip 20.1.1.0/25 any
                              seq 20 redirect 10.1.1.3 ip 20.1.1.0/24 any
                              Dell(conf-redirect-list)#
  • NOTE: Starting in release 9.4(0.0), Dell Networking OS supports the use of multiple recursive routes with the same source-address and destination-address combination in a redirect policy on an router.

A recursive route is a route for which the immediate next-hop address is learned dynamically through a routing protocol and acquired through a route lookup in the routing table. The user can configure multiple recursive routes in a redirect list by entering multiple seq redirect statements with the same source and destination address and specify a different next-hop IP address. In this way, the recursive routes are used as different forwarding routes for dynamic failover. If the primary path goes down and the recursive route is removed from the routing table, the seq redirect statement is ignored and the next statement in the list with a different route is used.

PBR Exceptions (Permit)

Use the command permit to create an exception to a redirect list. Exceptions are used when a forwarding decision should be based on the routing table rather than a routing policy.

Dell Networking OS assigns the first available sequence number to a rule configured without a sequence number and inserts the rule into the PBR CAM region next to the existing entries. Since the order of rules is important, ensure that you configure any necessary sequence numbers.

The permit statement is never applied because the redirect list covers all source and destination IP addresses.

Ineffective PBR Exception due to Low Sequence Number 

ip redirect-list rcl0
                                 seq 5 redirect 2.2.2.2 ip any any
                                 seq 10 permit ip host 3.3.3.3 any

To ensure that the permit statement or PBR exception is effective, use a lower sequence number, as shown below: 

                                 ip redirect-list rcl0 
                                 seq 10 permit ip host 3.3.3.3 any
                                 seq 15 redirect 2.2.2.2 ip any any

Apply a Redirect-list to an Interface using a Redirect-group

IP redirect lists are supported on physical interfaces as well as VLAN and port-channel interfaces.

  • NOTE: When you apply a redirect-list on a port-channel, when traffic is redirected to the next hop and the destination port-channel is shut down, the traffic is dropped. However, on the S-Series, the traffic redirected to the destination port-channel is sometimes switched.

Use the following command in INTERFACE mode to apply a redirect list to an interface. Multiple redirect-lists can be applied to a redirect-group. It is also possible to create two or more redirect-groups on one interface for backup purposes.

  1. Apply a redirect list (policy-based routing) to an interface.

    INTERFACE mode

    ip redirect-group redirect-list-name

    redirect-list-name is the name of a redirect list to apply to this interface. FORMAT: up to 16 characters

    Delete the redirect list from this interface with the [no] ip redirect-group command.

In this example, the list “xyz” is applied to the tenGigabitEthernet 4/0 interface.

Applying a Redirect-list to an Interface Example: 

Dell(conf-if-te-4/0)#ip redirect-group xyz 
                                 Dell(conf-if-te-4/0)#

Applying a Redirect-list to an Interface Example: 

Dell(conf-if-te-1/0)#ip redirect-group test
                                 Dell(conf-if-te-1/0)#ip redirect-group xyz
                                 Dell(conf-if-te-1/0)#show config
                                 !
                                 interface TenGigabitEthernet 1/0
                                 no ip address
                                 ip redirect-group test
                                 ip redirect-group xyz
                                 shutdown
                                 Dell(conf-if-te-1/0)#

In addition to supporting multiple redirect-lists in a redirect-group, multiple redirect-groups are supported on a single interface. Dell Networking OS has the capability to support multiple groups on an interface for backup purposes.

Show Redirect List Configuration

To view the configuration redirect list configuration, use the following command in EXEC mode:

  1. View the redirect list configuration and the associated interfaces.

    EXEC mode

    show ip redirect-list redirect-list-name

  2. View the redirect list entries programmed in the CAM.

    EXEC mode

    show cam pbr

    show cam-usage

List the redirect list configuration using the show ip redirect-list redirect-list-name command. The non-contiguous mask is displayed in dotted format (x.x.x.x). The contiguous mask is displayed in /x format. Some sample outputs are shown below: 

Dell#show ip redirect-list explicit_tunnel
                                 IP redirect-list explicit_tunnel:
                                 Defined as:
                                 seq 5 redirect tunnel 1 track 1 tcp 155.55.2.0/24 222.22.2.0/24, Track 1 [up], Next-hop reachable (via Te 1/32)
                                 seq 10 redirect tunnel 1 track 1 tcp any any, Track 1 [up], Next-hop reachable (via Te 1/32)
                                 seq 15 redirect tunnel 2 udp 155.55.0.0/16 host 144.144.144.144, Track 1 [up], Next-hop reachable (via Te 1/32)
                                 seq 35 redirect 155.1.1.2 track 5 ip 7.7.7.0/24 8.8.8.0/24, Track 5 [up], Next-hop reachable (via Po 5)
                                 seq 30 redirect 155.1.1.2 track 6 icmp host 8.8.8.8 any, Track 5 [up], Next-hop reachable (via Po 5)
                                 seq 35 redirect 42.1.1.2 icmp host 8.8.8.8 any, Next-hop reachable (via Vl 20)
                                 seq 40 redirect 43.1.1.2 tcp 155.55.2.0/24 222.22.2.0/24, Next-hop reachable (via Vl 30)
                                 seq 45 redirect 31.1.1.2 track 200 ip 12.0.0.0 255.0.0.197 13.0.0.0 255.0.0.197, Track 200 [up], Next-hop reachable (via Te
                                 1/32)
                                 , Track 200 [up], Next-hop reachable (via Vl 20)
                                 , Track 200 [up], Next-hop reachable (via Po 5)
                                 , Track 200 [up], Next-hop reachable (via Po 7)
                                 , Track 200 [up], Next-hop reachable (via Te 2/18)
                                 , Track 200 [up], Next-hop reachable (via Te 2/19)

Use the show ip redirect-list (without the list name) to display all the redirect-lists configured on the device. 

Dell#show ip redirect-list
                                 
                                 IP redirect-list rcl0:
                                 Defined as:
                                 seq 5 permit ip 200.200.200.200 
                                 200.200.200.200 199.199.199.199 
                                 199.199.199.199
                                 seq 10 redirect 1.1.1.2 tcp 234.224.234.234 255.234.234.234 222.222.222.222/24
                                 seq 40 ack, Next-hop reachable (via Te 8/1), ARP resolved
                                 Applied interfaces:
                                 Te 8/0
  • NOTE: If, the redirect-list is applied to an interface, the output of show ip redirect-list redirect-list-name command displays reachability and ARP status for the specified next-hop.

Showing CAM PBR Configuration Example : 

Dell#show cam pbr stack-unit 1 port-set 0
                                 
                                 TCP Flag: Bit 5 - URG, Bit 4 - ACK, Bit 3 - PSH, Bit 2 - RST, Bit 1 - SYN, Bit 0 - FIN
                                 
                                 Cam   Port VlanID Proto Tcp   Src   Dst   SrcIp    DstIp  Next-hop          Egress
                                 Index Flag  Port  Port  MAC   Port
                                 -----------------------------------------------------------------------------------------------------------------
                                 06080 0 N/A    IP    0x0   0 0 200.200.200.200 
                                 200.200.200.200 199.199.199.199 
                                 199.199.199.199 N/A  NA
                                 06081 0 N/A    TCP   0x10  0  40 234.234.234.234 255.234.234.234 222.222.222.222/
                                 24  00:00:00:00:00:09 8/1

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\