Netgear XSM4324FS Software Administration Manual Software Version 12.x - Page 158

M4300 Series and M4300-96X Fully Managed Switches PBR Configurations PBR is configurable on the following types of eligible routing interfaces: • Physical ports • VLAN interfaces On VLAN interfaces, when an ACL is applied, it implies that when any packet arrives with a corresponding VLAN ID on any port, it is matched and a corresponding action is taken. The same phenomenon applies to ACLs specified in the match clause of PBR. That is, if a PBR route map is applied on a VLAN interface, any packet coming with a corresponding VLAN ID on any port is matched against PBR rules corresponding to the match ACL clause and the corresponding set actions are taken into effect. To perform policy-based routing based on VLAN ID as the matching criteria for incoming packets, apply an ACL rule on the VLAN interface, but do not configure a rule with the VLAN ID as the match condition. PBR supports the preconfiguration of the route map on routing interfaces. If routing is not enabled on an interface, the route map can still be applied on that particular interface. When routing is not enabled on an interface, route-map configuration is not pushed into hardware. Rather, it is maintained only in configuration. As soon as routing is enabled on that particular interface, configuration is applied to hardware. PBR Example Network administrators can use PBR when load sharing must be done for the incoming traffic across multiple paths based on packet entities in the incoming traffic. Normally, to optimally utilize the data networks of the organization, the bulk traffic associated with the company activity must use a higher-bandwidth, high-cost (price of link) link while the basic connectivity continues over a lower bandwidth, low-cost link for interactive traffic. For such applications, policy-based routing is the right fit. Consider the network that is composed of two groups with different IP address ranges. If group1 addresses must be routed through ISP1 and group2 addresses must be routed through ISP2, the switch that is connected with different groups must be policy routed. Configure a match in the route map on the IP address range of different groups. This way, an equal access as well as source IP address-sensitive routing is achieved through PBR. PBR 158 Software Administration Manual