Policy Based Routing using ACL & Route Map

ByGroup 7Nischal (304360958)Pranali (304378534)

Access Control List

ACL specifies which users or system processes are granted access to which objects.Access Control List refers to rules that are applied to port numbers or IP address that are available on host or on layer 3.Can be configured to control both inbound and outbound traffic that is very similar to working of firewall.ACLs are subject to security regulations and standards such as PCI, DSS.

Types of Access List

Standard Access List Extended Access List Named Access List

Access List types cont.…

Standard Access ListThese ACLs use only the source IP address in an IP packet as

the condition test.All decisions are made based on the source IP address. This

means that standard access lists basically permit or deny an entire suite of protocols.

Extended Access ListThey can evaluate source and destination IP addresses, the Protocol field in the

Network layer header, and the port number at the Transport layer header. This gives extended access lists the ability to make much more granular

decisions when controlling traffic.

Access List types cont.…

Route Map

A route map defines which of the routes from the specified routing protocol are allowed to be redistributed into the target routing process.Route maps have many features in common with widely known ACLs.Route maps are more flexible than ACLs and can verify routes based on criteria which ACLs can not verify.

Route Map contd...

Route map using a permit clauseRoute map deny clauseRoute map permit or deny clause

Policy Based Routing (PBR)

It provides a mechanism for expressing and implementing forwarding/routing of data packets based on the policies defined by the network administrators.Routers forward packets to the destination addresses based on information from static routes or dynamic routing protocols such as RIP, OSPF, or Enhanced IGRP.

Objectives

Benefits of PBR

Source-Based Transist Provider SelectionQuality of Service (QoS)Cost SavingLoad Sharing

Topology

Configuration of Router

Configuring PBR

Verifying PBR