Skip to content

policy: added set vrf and mark matching documentation #1628

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: current
Choose a base branch
from
Open

policy: added set vrf and mark matching documentation #1628

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions docs/configuration/policy/route.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,20 @@ in this section.

Set match criteria based on connection mark.

.. cfgcmd:: set policy route <name> rule <n> mark <match_criteria>
.. cfgcmd:: set policy route6 <name> rule <n> mark <match_criteria>

Match based on the firewall mark (fwmark), where <match_criteria> can be:

* <0-2147483647> a single fwmark
* !<0-2147483647> everything except a single fwmark
* <start-end> a range of marks
* !<start-end> everything except the range of marks

.. note:: When using the ``set table`` or ``set vrf`` commands the mark
settings are ignored and overwritten with a table-specific mark that
is set to 0x7FFFFFFF - the id of the table/VRF.

.. cfgcmd:: set policy route <name> rule <n> source address
<match_criteria>
.. cfgcmd:: set policy route <name> rule <n> destination address
Expand Down Expand Up @@ -273,7 +287,20 @@ setting a different routing table.

Set the routing table to forward packet with.

.. note:: When using the ``set table`` or ``set vrf`` commands matching
against the mark is not possible, because it gets overwritten with a
table-specific mark that is 0x7FFFFFFF - the id of the table/VRF.

.. cfgcmd:: set policy route <name> rule <n> set tcp-mss <500-1460>
.. cfgcmd:: set policy route6 <name> rule <n> set tcp-mss <500-1460>

Set packet modifications: Explicitly set TCP Maximum segment size value.

.. cfgcmd:: set policy route <name> rule <n> set vrf <default | text >
.. cfgcmd:: set policy route6 <name> rule <n> set vrf <default | text >

Set the VRF to forward packet with.

.. note:: When using the ``set table`` or ``set vrf`` commands matching
against the mark is not possible, because it gets overwritten with a
table-specific mark that is 0x7FFFFFFF - the id of the table/VRF.