Configure the Router for the Basic PBR topology

Specify how the router should handle traffic coming from the out-of-path Exinda appliance, the WAN, and the LAN.

	Caution The IP addresses and netmasks used in this document match those used in the diagram on Basic policy-based routing. Use IP addresses that correspond to those in your network when configuring the router.

1. Launch the router command line interface.

• To enter privileged EXEC (enable) mode, at the prompt type the following command:

  hostname > enable

  The hostname # prompt is displayed.

• To enter configuration (config) mode, at the prompt type the following commands:

  hostname # configure terminal

  The hostname (config)# prompt is displayed.

2. Configure the interface parameters for the Exinda appliance installed out-of-path (Gig0/0).

   1. Specify the interface to configure.

      hostname (config)# interface GigabitEthernet0/0

   2. Set the IP address of the out-of-path Exinda appliance.

      hostname (config-if)# ip address 10.10.10.1 255.0.0.0

   3. Set the duplex and speed parameters for the interface.

      hostname (config-if)# duplex auto

      hostname (config-if)# speed auto

3. Configure the parameters for the WAN interface (Gig0/1).

   1. Specify the interface to configure.

      hostname (config)# interface GigabitEthernet0/1

   2. Set the IP address and netmask of the WAN interface

      hostname (config-if)# ip address 64.65.66.1 255.255.255.0

   3. Set the route map for policy routing to asymmetrical.

      hostname (config-if)# ip policy route-map Asym

   4. Set the duplex and speed parameters for the interface.

      hostname (config-if)# duplex auto

      hostname (config-if)# speed auto

4. Configure the parameters for the LAN interface (Fa0/1/1).

   1. Specify the interface to configure.

      hostname (config)# interface GigabitEthernet0/0

   2. Set the IP address and netmask of the LAN interface.

      hostname (config-if)# ip address 172.16.12.1 255.255.0.0

   3. Set the route map for policy routing with the name Asym.

      hostname (config-if)# ip policy route-map Asym

   4. Set the duplex and speed parameters for the interface.

      hostname (config-if)# duplex auto

      hostname (config-if)# speed auto

5. Create an access list named 120 that allows devices in the specified IP address range to access the network.

   hostname (config)# access-list 120 permit ip 172.16.0.0 0.0.255.255 64.65.66.0 0.0.0.255

   hostname (config)# access-list 120 permit ip 64.65.66.0 0.0.0.255 172.16.0.0 0.0.255.255

6. Configure the route map to allow access to the routes specified in the access list (120), and route the traffic to the router.

   route-map Asym permit 10

   match ip address 120

   set ip next-hop 10.10.10.2