Concept Guide

routing-policy-map
routing-policy-map
{branch <mac-addr>}|{role <user-role>} access-list <route-acl>
Description
This command associates a routing access control list (ACL) with a specific user role or a GREtunnel on a branch
controller.
Syntax
Parameter Description
branch <mac-addr>
By default, when a branch office deployment uses IPsec maps to define the
connections between each branch controller and its master controller, the
global ACL master-boc-traffic is applied to those IPsec maps. Use this
command to apply a local ACL to the GREtunnel between a specific branch
controllerand its master controller, overriding the default master-boc-traffic
ACL.
role <user-role>
Name of the user role to be associated with the specified routing ACL.
access-list
<route-acl>
Name of the route ACL to be associated to the specified user role.
Usage Guidelines
The commands to associate an access list to a user role vary, depending upon the type of access list being
associated to that role. Ethertype, MAC and session ACLs are applied globally across all controllers, but routing
access lists may vary between locations, so they are mapped to a user role in a local configuration setting.
In a branch controllerenvironment, where an IPsec map defines the connections between the local branch
controllers and a master controller, the global ACL master-boc-traffic is applied to all IPsec maps between the
master and the branch controllers. If any branch controller requires a different ACL, issue the command
routing-policy-map branch <mac-addr> access-list <acl> on that branch controller to associate a
different ACL to the L3 GRE tunnel between that one branch controller and its master. This local setting will
override the global settings defined in the master-boc-traffic ACL.
Example
The following example maps a user role to a routing ACL.
(host)(config) #routing-policy-map
role employee access-list branch1
To associate the user role with an ethertype, MAC or session ACL, use the command user-role <role> access-list
eth|mac|session <acl>.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide routing-policy-map | 774