Dell EMC SmartFabric OS10 User Guide Release 10.5.0

1. Create a VLAN interface.

   OS10(Config)# interface vlan999

2. Enable the interface.

   OS10(Conf-if-999)# no shutdown

3. Enter an IP address to the interface.

   OS10(Conf-if-999)# ip address 10.99.0.251/16

• Create an ACL and define what should be enabled for PBR processing.

  ip access-list TEST-ACL
  seq 10 permit tcp any any eq 80
  seq 20 permit tcp any any eq 443
  seq 30 permit tcp any any eq 21
  seq 40 permit icmp any any

• Create an ACL and define what should be excluded from PBR processing.

  ip access-list TEST-ACL-DENY
  seq 10 permit tcp 10.99.0.0/16 10.0.0.0/8 eq 80
  seq 20 permit tcp 10.99.0.0/16 10.0.0.0/8 eq 443
  seq 30 permit tcp 10.99.0.0/16 10.0.0.0/8 eq 21
  seq 40 permit icmp 10.99.0.0/16 10.0.0.0/8

• Create a route-map to block specific traffic from PBR processing.

  route-map TEST-RM deny 5
  match ip address TEST-ACL-DENY

• Create a route-map to permit traffic for PBR processing.

  route-map TEST-RM permit 10
  match ip address TEST-ACL
  set ip next-hop 10.0.40.235

• Apply the policy to the previously created interface.

  ip policy route-map TEST-RM

In this configuration, the route-map TEST-RM deny 5 configuration blocks traffic that matches the TEST-ACL-DENY ACL from further PBR processing. This traffic is routed using the routing table. The route-map TEST-RM permit 10 configuration sends traffic that matches the TEST-ACL ACL for PBR processing. Any packet that matches the TEST-ACL ACL is forwarded to 10.0.40.235.