Policy Based Routing using ACL & Route Map By Group 7 Nischal ( ) Pranali ( )

Access Control List  ACL specifies which users or system processes are granted access to which objects.  Access Control List refers to rules that are applied to port numbers or IP address that are available on host or on layer 3.  Can be configured to control both inbound and outbound traffic that is very similar to working of firewall.  ACLs are subject to security regulations and standards such as PCI, DSS.

Types of Access List  Standard Access List  Extended Access List  Named Access List

Access List types cont.… Standard Access List  These ACLs use only the source IP address in an IP packet as the condition test.  All decisions are made based on the source IP address. This means that standard access lists basically permit or deny an entire suite of protocols.

Extended Access List  They can evaluate source and destination IP addresses, the Protocol field in the Network layer header, and the port number at the Transport layer header.  This gives extended access lists the ability to make much more granular decisions when controlling traffic. Access List types cont.…

Route Map  A route map defines which of the routes from the specified routing protocol are allowed to be redistributed into the target routing process.  Route maps have many features in common with widely known ACLs.  Route maps are more flexible than ACLs and can verify routes based on criteria which ACLs can not verify.

Route Map contd...  Route map using a permit clause  Route map deny clause  Route map permit or deny clause

Policy Based Routing (PBR)  It provides a mechanism for expressing and implementing forwarding/routing of data packets based on the policies defined by the network administrators.  Routers forward packets to the destination addresses based on information from static routes or dynamic routing protocols such as RIP, OSPF, or Enhanced IGRP.

Objectives

Benefits of PBR  Source-Based Transist Provider Selection  Quality of Service (QoS)  Cost Saving  Load Sharing

Topology

Configuration of Router

Configuring PBR

Verifying PBR