Enterprise

Community Forums Switches

Route mapping for S9712

Route mapping for S9712

Created: Sep 6, 2018 15:04:35Latest reply: Sep 8, 2018 06:43:39 314 1 0 0

display all floors ^#1

Hi everyone,

I just want to ask how can I configure a route map for different subnet in our core switch.

I have S9712 and I have 3 subnets and I have two gateway to ISP

how I can make let each subnet go through different ISP.

In nortal we do it like the below :

filter act 10 create

filter act 10 ip srcIp,dstIp

filter act 10 apply

filter acl 5 create inPort act 10 name "Redirect_Filters"

filter acl 5 port add 2/1,2/4-2/5,2/7,2/9,2/11,2/13,2/15,2/17,2/20,4/1-4/2,8/2-8/48

filter acl 5 ace 1 create name "Allow-Local-Subnet"

filter acl 5 ace 1 action permit stop-on-match true

filter acl 5 ace 1 ip dst-ip eq 10.10.0.0-10.10.255.255

filter acl 5 ace 1 enable

filter acl 5 ace 2 create name "Redirect_Servers2"

filter acl 5 ace 2 action permit redirect-next-hop 10.0.2.10 unreachable permit stop-on-match true

filter acl 5 ace 2 ip src-ip eq 10.10.2.0-10.0.2.255

filter acl 5 ace 2 enable

filter acl 5 ace 3 create name "Redirect_Users3"

filter acl 5 ace 3 action permit redirect-next-hop 10.0.3.10 unreachable permit stop-on-match true

filter acl 5 ace 3 ip src-ip eq 10.10.1.0-10.0.1.255

filter acl 5 ace 4 create name "Redirect_Managers4"

filter acl 5 ace 4 action permit redirect-next-hop 10.0.3.10 unreachable permit stop-on-match true

filter acl 5 ace 4 ip src-ip eq 10.10.22.0-10.0.22.255

filter acl 5 ace 4 enable

how I can do it in Huawei core ?!

x
convention：

Helpful (0) Favorite(0) Report

Sergio93

Created Sep 8, 2018 06:43:39

Hi,

You can configure some traffic policies and apply them on the switch interfaces :
1) configure ACL to match your subnets :
[Switch] acl 3000
[Switch-acl-3000] rule permit source 192.168.1.0 0.0.0.255
[Switch-acl-3000] quit

2)configure the classifier of the traffic :
[Switch] traffic classifier c1 operator and
[Switch-classifier-c1] if-match acl 2000
[Switch-classifier-c1] quit

3)configure the behavior for the classified traffic:
[Switch] traffic behavior b1
[Switch-behavior-b1]redirect ip-nexthop 10.0.0.1

If multiple next hop IP addresses are configured, the device redirects packets in active/standby mode. A maximum of four next hop IP addresses can be configured in a traffic behavior. The device determines the primary path and backup paths according to the sequence in which next hop IP addresses were configured. The next hop IP address that was configured first has the highest priority and this next hop is used as the primary path. Other next hops are used as backup paths. When the primary link becomes Down, a next hop with higher priority is used as the primary link.

4)configure the traffic policy that we'll be applied later on interface :
[Switch] traffic policy p1
[Switch-trafficpolicy-p1] classifier c1 behavior b1
[Switch-trafficpolicy-p1] quit

5)apply the traffic policy on interfaces(physical or logical)
[Switch] interface gigabitethernet 1/0/1
[Switch-GigabitEthernet1/0/1] traffic-policy p1 inbound
[Switch-GigabitEthernet1/0/1] quit

Hope this helps you.

x
convention：

BEST%20ANSWER!%20If%20you%20think%20I%20earn%20it!%3Cbr%2F%3E%3Cbr%2F%3EIf%20this%20post%20was%20useful%20to%20you%2C%20please%20click%20the%20%3Cimg%20id%3D%22aimg_eYhFO%22%20onclick%3D%22zoom(this%2C%20this.src%2C%200%2C%200%2C%200)%22%20class%3D%22zoom%22%20src%3D%22https%3A%2F%2Fforum.huawei.com%2Fenterprise%2Fen%2Fstatic%2Fimage%2Fcommon%2Fsupport01.png%22%20onmouseover%3D%22img_onmouseoverfunc(this)%22%20onload%3D%22thumbImg(this)%22%20border%3D%220%22%20alt%3D%22%22%20%2F%3E%20%3Cfont%20color%3D%22DarkOrange%22%3EHelpful%3C%2Ffont%3E%20button%20and%20flag%20my%20post%20as%20a%20%26quot%3BBEST%20ANSWER%26quot%3B%20so%20others%20can%20benefit.%20Thank%20you%20%3Cimg%20id%3D%22aimg_H808i%22%20onclick%3D%22zoom(this%2C

Comment

Notice

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."