Packet type-based IPv6 local PBR configuration example

Network requirements

As shown in Figure 118, configure IPv6 PBR on Switch A to forward all TCP packets to the next hop 1::2. Switch A forwards other packets according to the routing table.

Figure 118: Network diagram

Configuration procedure

  1. Configure Switch A:

    # Create VLAN 10 and VLAN 20.

    <SwitchA> system-view
    [SwitchA] vlan 10
    [SwitchA-vlan10] quit
    [SwitchA] vlan 20
    [SwitchA-vlan20] quit
    

    # Configure the IPv6 addresses of VLAN-interface 10 and VLAN-interface 20.

    [SwitchA] interface vlan-interface 10
    [SwitchA-Vlan-interface10] ipv6 address 1::1 64
    [SwitchA-Vlan-interface10] quit
    [SwitchA] interface vlan-interface 20
    [SwitchA-Vlan-interface20] ipv6 address 2::1 64
    [SwitchA-Vlan-interface20] quit
    

    # Configure ACL 3001 to match TCP packets.

    [SwitchA] acl ipv6 advanced 3001
    [SwitchA-acl-ipv6-adv-3001] rule permit tcp
    [SwitchA-acl-ipv6-adv-3001] quit
    

    # Configure Node 5 for policy aaa to forward TCP packets to next hop 1::2.

    [SwitchA] ipv6 policy-based-route aaa permit node 5
    [SwitchA-pbr6-aaa-5] if-match acl 3001
    [SwitchA-pbr6-aaa-5] apply next-hop 1::2
    [SwitchA-pbr6-aaa-5] quit
    

    # Configure IPv6 local PBR by applying policy aaa to Switch A.

    [SwitchA] ipv6 local policy-based-route aaa
    
  2. Configure Switch B:

    # Create VLAN 10.

    <SwitchB> system-view
    [SwitchB] vlan 10
    [SwitchB-vlan10] quit
    

    # Configure the IPv6 address of VLAN-interface 10.

    [SwitchB] interface vlan-interface 10
    [SwitchB-Vlan-interface10] ipv6 address 1::2 64
    
  3. Configure Switch C:

    # Create VLAN 20.

    <SwitchC> system-view
    [SwitchC] vlan 20
    [SwitchC-vlan20] quit
    

    # Configure the IPv6 address of VLAN-interface 20.

    [SwitchC] interface vlan-interface 20
    [SwitchC-Vlan-interface20] ipv6 address 2::2 64
    

Verifying the configuration

# Telnet to Switch B on Switch A. The operation succeeds.

# Telnet to Switch C on Switch A. The operation fails.

# Ping Switch C from Switch A. The operation succeeds.

Telnet uses TCP and ping uses ICMP. The results show the following: