Packet type-based IPv6 local PBR configuration example

As shown in Figure 116, Switch B and Switch C cannot reach each other. Configure IPv6 PBR on Switch A to forward all TCP packets to the next hop 1::2. Switch A forwards other packets according to the routing table.

1. Configure Switch A:

   # Create VLAN 10 and VLAN 20.

   <SwitchA> system-view
   [SwitchA] vlan 10
   [SwitchA-vlan10] quit
   [SwitchA] vlan 20
   [SwitchA-vlan20] quit
   

   # Configure the IPv6 addresses of VLAN-interface 10 and VLAN-interface 20.

   [SwitchA] interface vlan-interface 10
   [SwitchA-Vlan-interface10] ipv6 address 1::1 64
   [SwitchA-Vlan-interface10] quit
   [SwitchA] interface vlan-interface 20
   [SwitchA-Vlan-interface20] ipv6 address 2::1 64
   [SwitchA-Vlan-interface20] quit
   

   # Configure ACL 3001 to match TCP packets.

   [SwitchA] acl ipv6 advanced 3001
   [SwitchA-acl-ipv6-adv-3001] rule permit tcp
   [SwitchA-acl-ipv6-adv-3001] quit
   

   # Configure Node 5 for policy aaa to forward TCP packets to next hop 1::2.

   [SwitchA] ipv6 policy-based-route aaa permit node 5
   [SwitchA-pbr6-aaa-5] if-match acl 3001
   [SwitchA-pbr6-aaa-5] apply next-hop 1::2
   [SwitchA-pbr6-aaa-5] quit
   

   # Configure IPv6 local PBR by applying policy aaa to Switch A.

   [SwitchA] ipv6 local policy-based-route aaa
   

2. Configure Switch B:

   # Create VLAN 10.

   <SwitchB> system-view
   [SwitchB] vlan 10
   [SwitchB-vlan10] quit
   

   # Configure the IPv6 address of VLAN-interface 10.

   [SwitchB] interface vlan-interface 10
   [SwitchB-Vlan-interface10] ipv6 address 1::2 64
   

3. Configure Switch C:

   # Create VLAN 20.

   <SwitchC> system-view
   [SwitchC] vlan 20
   [SwitchC-vlan20] quit
   

   # Configure the IPv6 address of VLAN-interface 20.

   [SwitchC] interface vlan-interface 20
   [SwitchC-Vlan-interface20] ipv6 address 2::2 64
   

# Telnet to Switch B on Switch A. The operation succeeds.

# Telnet to Switch C on Switch A. The operation fails.

# Ping Switch C from Switch A. The operation succeeds.

Telnet uses TCP and ping uses ICMP. The results show the following:

• All TCP packets sent from Switch A are forwarded to the next hop 1::2.

• Other packets are forwarded through VLAN-interface 20.

• The IPv6 local PBR configuration is effective.