Example for Configuring PBR

Procedure

1. Create VLANs and configure interfaces and the default route to allow all packets to access the external network devices through the gateway 10.40.40.2/24.

   # Create VLAN 100 on SwitchA.

   <HUAWEI> system-view
   [~HUAWEI] sysname SwitchA
   [*HUAWEI] commit
   [~SwitchA] vlan 100
   [*SwitchA-vlan100] quit
   [*SwitchA] commit

   # Configure 10GE1/0/2 on SwitchA as a trunk interface. Add 10GE1/0/1 and 10GE1/0/2 to VLAN 100.

   [~SwitchA] interface 10ge 1/0/1
   [~SwitchA-10GE1/0/1] port default vlan 100
   [*SwitchA-10GE1/0/1] quit
   [*SwitchA] interface 10ge 1/0/2
   [*SwitchA-10GE1/0/2] port link-type trunk
   [*SwitchA-10GE1/0/2] port trunk allow-pass vlan 100
   [*SwitchA-10GE1/0/2] quit
   [*SwitchA] commit

   # Create VLAN 200 on SwitchB.

   <HUAWEI> system-view
   [~HUAWEI] sysname SwitchB
   [*HUAWEI] commit
   [~SwitchB] vlan 200
   [*SwitchB-vlan200] quit
   [*SwitchB] commit

   # Configure 10GE1/0/2 on SwitchB as a trunk interface. Add 10GE1/0/1 and 10GE1/0/2 to VLAN 200.

   [~SwitchB] interface 10ge 1/0/1
   [~SwitchB-10GE1/0/1] port default vlan 200
   [*SwitchB-10GE1/0/1] quit
   [*SwitchB] interface 10ge 1/0/2
   [*SwitchB-10GE1/0/2] port link-type trunk
   [*SwitchB-10GE1/0/2] port trunk allow-pass vlan 200
   [*SwitchB-10GE1/0/2] quit
   [*SwitchB] commit

   # Create VLAN 100, VLAN 200, VLAN 300, and VLAN 400 on Switch.

   <HUAWEI> system-view
   [~HUAWEI] sysname Switch
   [*HUAWEI] commit
   [~Switch] vlan batch 100 200 300 400
   [*Switch] commit

   # Configure 10GE1/0/1 and 10GE1/0/2 on Switch as trunk interfaces. Add 10GE1/0/1 to VLAN 100, 10GE1/0/2 to VLAN 200, 10GE1/0/3 to VLAN 300, and 10GE1/0/4 to VLAN 400.

   [~Switch] interface 10ge 1/0/1
   [~Switch-10GE1/0/1] port link-type trunk
   [*Switch-10GE1/0/1] port trunk allow-pass vlan 100
   [*Switch-10GE1/0/1] quit
   [*Switch] interface 10ge 1/0/2
   [*Switch-10GE1/0/2] port link-type trunk
   [*Switch-10GE1/0/2] port trunk allow-pass vlan 200
   [*Switch-10GE1/0/2] quit
   [*Switch] interface 10ge 1/0/3
   [*Switch-10GE1/0/3] port default vlan 300
   [*Switch-10GE1/0/3] quit
   [*Switch] interface 10ge 1/0/4
   [*Switch-10GE1/0/4] port default vlan 400
   [*Switch-10GE1/0/4] quit
   [*Switch] commit
   

   # Create VLANIF 100, VLANIF 200, VLANIF 300, and VLANIF 400 on Switch and configure IP addresses for them.

   [~Switch] interface vlanif 100
   [*Switch-Vlanif100] ip address 10.10.10.1 24
   [*Switch-Vlanif100] quit
   [*Switch] interface vlanif 200
   [*Switch-Vlanif200] ip address 10.20.20.1 24
   [*Switch-Vlanif200] quit
   [*Switch] interface vlanif 300
   [*Switch-Vlanif300] ip address 10.30.30.1 24
   [*Switch-Vlanif300] quit
   [*Switch] interface vlanif 400
   [*Switch-Vlanif400] ip address 10.40.40.1 24
   [*Switch-Vlanif400] quit
   [*Switch] commit

   # Configure the default route on Switch to allow all packets to access the external network devices through the gateway 10.40.40.2/24.

   [~Switch] ip route-static 0.0.0.0 0.0.0.0 10.40.40.2
   [*Switch] commit

2. Configure a traffic classifier.

   # On Switch, create traffic classifier c1 to match packets with VLAN ID 100.

   [~Switch] traffic classifier c1
   [*Switch-classifier-c1] if-match vlan 100
   [*Switch-classifier-c1] quit
   [*Switch] commit

3. Configure a traffic behavior.

   # On Switch, create traffic behavior b1 to specify redirection to the gateway 10.30.30.2/24.

   [~Switch] traffic behavior b1
   [*Switch-behavior-b1] redirect nexthop 10.30.30.2
   [*Switch-behavior-b1] quit
   [*Switch] commit

4. Configure a traffic policy and apply the traffic policy to interfaces.

   # Create a traffic policy p1 on the Switch and bind the traffic policy to the traffic classifier and traffic behavior.

   [~Switch] traffic policy p1
   [*Switch-trafficpolicy-p1] classifier c1 behavior b1
   [*Switch-trafficpolicy-p1] quit
   [*Switch] commit

   # Apply the traffic policy p1 to the inbound direction of 10GE1/0/1.

   [~Switch] interface 10ge 1/0/1
   [~Switch-10GE1/0/1] traffic-policy p1 inbound
   [*Switch-10GE1/0/1] quit
   [*Switch] commit

5. Verify the configuration.

   # View the traffic classifier configuration.

   <Switch> display traffic classifier
     Traffic Classifier Information:
       Classifier: c1 
         Type: OR
         Rule(s) : 
           if-match vlan 100
   
   Total classifier number is 1   
   

   # View the traffic policy configuration.

   <Switch> display traffic policy p1
     Traffic Policy Information:
       Policy: p1  
         Classifier: c1
           Type: OR
         Behavior: b1
           Redirect: 
             Redirect nexthop
             10.30.30.2