Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell EMC SmartFabric OS10 User Guide Release 10.5.0

PDF

Use PBR to permit and block specific traffic

This section explains how to permit specific traffic through an interface using PBR.

Configure the interface
  1. Create a VLAN interface. 
    OS10(Config)# interface vlan999
  2. Enable the interface. 
    OS10(Conf-if-999)# no shutdown
  3. Enter an IP address to the interface. 
    OS10(Conf-if-999)# ip address 10.99.0.251/16
Define the PBR parameters
  • Create an ACL and define what should be enabled for PBR processing. 
    ip access-list TEST-ACL
seq 10 permit tcp any any eq 80
seq 20 permit tcp any any eq 443
seq 30 permit tcp any any eq 21
seq 40 permit icmp any any
  • Create an ACL and define what should be excluded from PBR processing. 
    ip access-list TEST-ACL-DENY
seq 10 permit tcp 10.99.0.0/16 10.0.0.0/8 eq 80
seq 20 permit tcp 10.99.0.0/16 10.0.0.0/8 eq 443
seq 30 permit tcp 10.99.0.0/16 10.0.0.0/8 eq 21
seq 40 permit icmp 10.99.0.0/16 10.0.0.0/8
  • Create a route-map to block specific traffic from PBR processing. 
    route-map TEST-RM deny 5
match ip address TEST-ACL-DENY
  • Create a route-map to permit traffic for PBR processing. 
    route-map TEST-RM permit 10
match ip address TEST-ACL
set ip next-hop 10.0.40.235
  • Apply the policy to the previously created interface. 
    ip policy route-map TEST-RM
NOTE In PBR, the permit or deny action specified in the access list does not determine whether the traffic is forwarded or dropped. The permit or deny action specified in the route-map configuration determines the results of PBR processing.

In this configuration, the route-map TEST-RM deny 5 configuration blocks traffic that matches the TEST-ACL-DENY ACL from further PBR processing. This traffic is routed using the routing table. The route-map TEST-RM permit 10 configuration sends traffic that matches the TEST-ACL ACL for PBR processing. Any packet that matches the TEST-ACL ACL is forwarded to 10.0.40.235.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\