Creating Policy Lists for IP

The following example creates an IP policy list named routeForABCCorp. For information about creating the CLACLs and rate-limit profile used in this example, see the previous sections.

  1. Create the policy list routeForABCCorp.
    host1(config)#ip policy-list routeForABCCorp host1(config-policy-list)#
  2. Create the classification group for the CLACL named ipCLACL10 and assign the precedence to the classification group.
    host1(config-policy-list)#classifier-group ipCLACL10 precedence 75 host1(config-policy-list-classifier-group)#
  3. Add a rule that specifies a group of forwarding solutions based on classifier list ipCLACL10.
    host1(config-policy-list-classifier-group)#forward next-hop 192.0.2.12 order 10host1(config-policy-list-classifier-group)#forward next-hop 192.0.100.109 order 20host1(config-policy-list-classifier-group)#forward next-hop 192.120.17.5 order 30host1(config-policy-list-classifier-group)#forward interface ip 3/1 order 40
  4. Add a rule that sets a ToS byte value of 125 for packets based on classifier list ipCLACL10.
    host1(config-policy-list-classifier-group)#mark tos 125
  5. Add a rule that uses rate-limit profile ipRLP25.
    host1(config-policy-list-classifier-group)#rate-limit-profile ipRLP25
  6. Exit Classifier Group Configuration mode for ipCLACL10, then create a new classification group for classifier list ipCLACL20. Add a rule that filters packets based on classifier list ipCLACL20.
    host1(config-policy-list-classifier-group)#exithost1(config-policy-list)#classifier-group ipCLACL20 precedence 125host1(config-policy-list-classifier-group)#filter
  7. Exit Policy List Configuration mode to save the configuration.
    host1(config-policy-list-classifier-group)#exithost1(config-policy-list)#exithost1(config)#
  8. Display the policy list.
    host1#show policy-list routeForABCCorp
    
                                      Policy Table
                                      ------ -----
    IP Policy routeForABCCorp
       Administrative state: enable
       Reference count:      0
       Classifier control list: ipCLACL10, precedence 75
          forward
             Virtual-router: default
             List:
               next-hop 192.0.2.12, order 10, rule 2 (active)
               next-hop 192.0.100.109, order 20, rule 3 (reachable)
               next-hop 192.120.17.5, order 30, rule 4 (reachable)
               interface ip3/1, order 40, rule 5
          mark tos 125
          rate-limit-profile ipRLP25
       Classifier control list: ipCLACL20, precedence 125
          filter

Related Documentation