
IP Policy Configuration Examples
234 Enterasys Xpedition User Reference Manual
The following is the IP policy configuration for the Policy Router in Figure 23:
Firewall Load Balancing
The next hop gateway can be selected by the following information in the IP packet:
source IP, destination IP, or both the source and destination IP. Figure 24 illustrates this
configuration.
Figure 24. Selecting Next Hop Gateway from IP Packet Information
One session should always go to a particular firewall for persistence.
interface create ip mls0 address-netmask 10.50.1.1/16 port et.1.1
acl contractors permit ip 10.50.1.0/24 any any any 0
acl full-timers permit ip 10.50.2.0/24 any any any 0
ip-policy access permit acl contractors next-hop-list 11.1.1.1 action policy-only
ip-policy access permit acl full-timers next-hop-list 12.1.1.1 action policy-first
ip-policy access apply interface mls0
Intranet
Internet
Policy
Router 1
Policy
Router 2
Firewalls
1
2
3
4
1.1.1.5
2.2.2.5
1.1.1.1 2.2.2.1
1.1.1.2
2.2.2.2
1.1.1.3 2.2.2.3
1.1.1.4
2.2.2.4
mls1
mls2
e
t
.
1
.
1
e
t
.
1
.
2
e
t
.
1
.
3
e
t
.
1
.
4
e
t.
1
.
1
e
t
.
1
.
2
e
t
.
1
.
3
e
t
.
1
.
4
Komentáře k této Příručce