Difference between revisions of "Policy Based Routing"

From Teltonika Networks Wiki
 
(90 intermediate revisions by the same user not shown)
Line 3: Line 3:
  
 
==Introduction==
 
==Introduction==
−
----
 
−
Policy-based routing (PBR) is a technique used in computer networking to direct network packets based on defined criteria beyond the standard destination-based routing. Unlike traditional routing, which forwards packets solely based on their destination address, PBR allows administrators to customize routing decisions according to various factors such as source address, type of service, protocol, or application.
 
  
−
With policy-based routing, network administrators can implement specific rules or policies to dictate the path that packets should take through the network. This flexibility enables organizations to optimize traffic flow, prioritize certain types of traffic, enforce security measures, and manage network resources more efficiently.
+
Policy-based routing (PBR) is a technique used in computer networking to direct network packets based on defined criteria beyond the standard destination-based routing. Unlike traditional routing, which forwards packets solely based on their destination address, PBR allows to customize routing decisions according to various factors.
 +
 
 +
With policy-based routing can implement specific rules or policies to dictate the path that packets should take through the network. This flexibility enables organizations to optimize traffic flow, prioritize certain types of traffic, enforce security measures, and manage network resources more efficiently.
  
 
==Prerequisites & Topology==
 
==Prerequisites & Topology==
−
----
+
 
  
 
'''Before proceeding with the confuration, ensure that all requirements are met:'''
 
'''Before proceeding with the confuration, ensure that all requirements are met:'''
  
−
# Before starting you need to have 3 different WAN connections. In this case we are going to use: '''Wi-fi WAN''', '''Wired WAN''' and '''Mobile WAN'''.
+
# Before starting you need to have 3 different WAN connections. In this case we are going to use: '''[https://wiki.teltonika-networks.com/view/WiFi_WAN_example Wi-fi WAN]''', '''Wired WAN''' and '''Mobile WAN'''.These interfaces have to be preconfigured.
  
−
[[File:PBS model.png|border|class=tlt-border|center]]
+
[[File:697225_topo2.png|border|class=tlt-border|center| 1000x1000px]]
  
 
==Configuration==
 
==Configuration==
−
----
+
 
 
{{Template:Networking_rutos_manual_basic_advanced_webui_disclaimer
 
{{Template:Networking_rutos_manual_basic_advanced_webui_disclaimer
 
| series = RUTX
 
| series = RUTX
Line 91: Line 91:
  
 
After configuring all LAN interfaces the end result should look something like this:
 
After configuring all LAN interfaces the end result should look something like this:
−
[[File:PBS LAN_CON.png|border|class=tlt-border|center| 1000x400px]]
+
[[File:PBS LAN_CON1.png|border|class=tlt-border|center| 1100x370px]]
  
 
===Configuring Policy Based Routing===
 
===Configuring Policy Based Routing===
 
----
 
----
−
Open WebUI → Network → Routing → Policy based routing → Add new instance and create new instances for each available WAN in this case Wi-Fi WAN, Wired-WAN and Mobile:
+
Open '''WebUI → Network → Routing → Policy based routing → Add new instance''' and create new instances for each available WAN in this case Wi-Fi WAN, Wired-WAN and Mobile:
  
 
====Creating Wifi Wan Routing Table====
 
====Creating Wifi Wan Routing Table====
Line 102: Line 102:
 
# Enter ID: '''1'''
 
# Enter ID: '''1'''
 
# Enter New configuration name: '''WifiWan'''
 
# Enter New configuration name: '''WifiWan'''
−
[[File:PBS_TABLES_WIFI.png|border|class=tlt-border|center|1000x300px]]
+
[[File:PBR IMAGE WIFI.png|border|class=tlt-border|center|1000x300px]]
 
click [[File:Add Button.png|40x70px]] in the new window make following changes:
 
click [[File:Add Button.png|40x70px]] in the new window make following changes:
 +
 
=====Static IPv4 Routes=====
 
=====Static IPv4 Routes=====
 
----
 
----
 
click [[File:Add Button.png|40x70px]] and aplly this to the route:
 
click [[File:Add Button.png|40x70px]] and aplly this to the route:
−
#Select Interface: '''WifiWan''' | Enter Target: ''''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0'''
+
#Select Interface: '''WifiWan''' | Enter Target: '''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0''' | Enter IPv4-Gateway: '''192.168.1.1 (Note: Use the Wi-Fi network's gateway. The current LAN gateway in use is 192.168.100.1. However, the correct gateway to route correctly will be the next hop address. This means the router gateway providing the Wi-Fi WAN should be used. In my case, this gateway is 192.168.1.1.)'''  
−
[[File:WiFiWAN_changes.png|border|class=tlt-border|center|1000x300px]]
+
[[File:PBR_P_ROUTE_111.png|border|class=tlt-border|center|1000x300px]]
  
 
====Creating Wired Wan Routing Table====
 
====Creating Wired Wan Routing Table====
Line 120: Line 121:
 
----
 
----
 
click [[File:Add Button.png|40x70px]] and aplly this to the route:
 
click [[File:Add Button.png|40x70px]] and aplly this to the route:
−
#Select Interface: '''wan''' | Enter Target: ''''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0'''
+
#Select Interface: '''wan''' | Enter Target: '''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0''' | Enter IPv4-Gateway: '''192.168.3.1'''
−
[[File:PBS_WAN_ROUTE.png|border|class=tlt-border|center|1000x300px]]
+
[[File:PBR_P_ROUTE_2.png|border|class=tlt-border|center|1000x300px]]
  
 
====Creating Mobile Wan Routing Table====
 
====Creating Mobile Wan Routing Table====
Line 128: Line 129:
 
Add new instance:
 
Add new instance:
 
# Enter ID: '''5'''
 
# Enter ID: '''5'''
−
# Enter New configuration name: '''MwWan'''
+
# Enter New configuration name: '''MWan'''
 
[[File:PBR_MOBILE_1.png|border|class=tlt-border|center|1000x300px]]
 
[[File:PBR_MOBILE_1.png|border|class=tlt-border|center|1000x300px]]
  
Line 136: Line 137:
 
----
 
----
 
click [[File:Add Button.png|40x70px]] and aplly this to the route:
 
click [[File:Add Button.png|40x70px]] and aplly this to the route:
−
#Select Interface:'''mob1s1a1''' | Enter Target: ''''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0'''
+
#Select Interface:'''mob1s1a1''' | Enter Target: '''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0'''
 
[[File:PBS_TABLES_WAN.png|border|class=tlt-border|center|1000x300px]]
 
[[File:PBS_TABLES_WAN.png|border|class=tlt-border|center|1000x300px]]
 +
 
====Creating Routing Rules for IPv4====
 
====Creating Routing Rules for IPv4====
 
----
 
----
Line 144: Line 146:
 
By clicking [[File:Add Button.png|40x70px]] create 3 rules under '''Routing Rules for IPv4''' tab apply these changes to the rules:
 
By clicking [[File:Add Button.png|40x70px]] create 3 rules under '''Routing Rules for IPv4''' tab apply these changes to the rules:
 
======Policy Rule 1======
 
======Policy Rule 1======
−
-----
+
----
 
# Enter Priority: '''1'''
 
# Enter Priority: '''1'''
 
# Select Incoming interface: '''LAN_VLAN_ETH0'''
 
# Select Incoming interface: '''LAN_VLAN_ETH0'''
 
# Select Outgoing interface: '''None'''
 
# Select Outgoing interface: '''None'''
 
# Select Matched Traffic Action: '''Lookup Table'''
 
# Select Matched Traffic Action: '''Lookup Table'''
−
# Lookup Table: '''WanWifi(1)'''
+
# Lookup Table: '''WifiWAN(1)'''
 +
 
 +
[[File:POLICY_RULE_11.png|border|class=tlt-border|center]]
  
−
[[File:POLICY_RULE_1.png|border|class=tlt-border|center]]
 
 
======Policy Rule 2======
 
======Policy Rule 2======
 
-----
 
-----
Line 161: Line 164:
 
[[File:POLICY_RULE_2.png|border|class=tlt-border|center]]
 
[[File:POLICY_RULE_2.png|border|class=tlt-border|center]]
 
======Policy Rule 3======
 
======Policy Rule 3======
−
-----
+
----
 
# Enter Priority: '''1'''
 
# Enter Priority: '''1'''
 
# Select Incoming interface: '''LAN_VLAN_5'''
 
# Select Incoming interface: '''LAN_VLAN_5'''
Line 170: Line 173:
  
 
'''NOTE: Delete all Autimatic or unrelated routing rules'''
 
'''NOTE: Delete all Autimatic or unrelated routing rules'''
 +
 +
===Configuration testing===
 +
----
 +
 +
Connect end device to physical port that is assingned to different routing policy. Open cmd and run this command: '''tracert 8.8.8.8''', three physical ports that we assigned to diffrent Vlans route to 8.8.8.8 should be using different gateways and public addresses visit to check if address changes [https://whatismyipaddress.com/ whatismyipaddress].
 +
 +
Public IP addresses that are used in my topology:
 +
# WiFi WAN: '''78.xxx.xxx.xxx'''
 +
# Wired WAN: '''213.xxx.xxx.xxx'''
 +
# Mobile WAN: '''84.xxx.xxx.xxx'''
 +
 +
 +
====Physical Port 1 Test Result====
 +
----
 +
[[File:Test1.png|border|class=tlt-border|center]]
 +
 +
[[File:ISP1.png|border|class=tlt-border|center|800x600px]]
 +
 +
====Physical Port 2 Test Result====
 +
----
 +
[[File:Test22.png|border|class=tlt-border|center]]
 +
 +
[[File:ISP2.png|border|class=tlt-border|center|800x600px]]
 +
 +
====Physical Port 3 Test Result====
 +
----
 +
[[File:Test33.png|border|class=tlt-border|center]]
 +
 +
[[File:ISP3.png|border|class=tlt-border|center|800x600px]]
 +
 +
===Policy Based Routing on a single Host===
 +
----
 +
====Single Host Routing Topology====
 +
[[File:697224_topo1.png|border|class=tlt-border|center|1000x1000px]]
 +
 +
====Wired WAN Routing Policy Priority Change====
 +
----
 +
'''Open WebUI → Network → Routing → Policy based routing → Routing Rules for IPv4''' and click [[File:Pencil2.png]] on '''Policy Rule 2'''
 +
----
 +
Make following changes:
 +
# Set Priority: '''2'''
 +
 +
[[File:PBRSN.png|border|class=tlt-border|center|]]
 +
 +
====Creating New Routing Policy Rule====
 +
----
 +
Open '''WebUI → Network → Routing → Policy based routing'''
 +
 +
=====Creating Single Node Routing Table Over WifiWan=====
 +
----
 +
Add new instance:
 +
 +
# Enter ID: '''7'''
 +
# Enter New configuration name: '''Node'''
 +
[[File:Node 1 Table.png|border|class=tlt-border|center]]
 +
 +
 +
click [[File:Add Button.png|40x70px]] in the new window make following changes:
 +
 +
=====Static IPv4 Routes=====
 +
----
 +
click [[File:Add Button.png|40x70px]] and aplly this to the route:
 +
#Select Interface: '''WifiWan''' | Enter Target: '''0.0.0.0''' | Enter IPv4-Netmask: '''0.0.0.0''' | Enter IPv4-Gateway: '''192.168.1.1'''
 +
[[File:PBR_P_ROUTE_111.png|border|class=tlt-border|center|1000x300px]]
 +
 +
====Routing Rules for IPv4====
 +
----
 +
By clicking [[File:Add Button.png|40x70px]] create rule under '''Routing Rules for IPv4''' tab apply these changes to the rules:
 +
======Policy Rule 4======
 +
----
 +
# Enter Priority: '''1'''
 +
# Select Incoming interface: '''LAN_VLAN_3'''
 +
# Select Outgoing interface: '''None'''
 +
# Enter Source subnet: '''192.168.3.246/32'''
 +
# Select Matched Traffic Action: '''Lookup Table'''
 +
# Lookup Table: '''Node (7)'''
 +
 +
[[File:PR4.png|border|class=tlt-border|center|1000x800px]]
 +
 +
====Testing the Policy Route====
 +
----
 +
[[File:POLICY_ROUTE.png|border|class=tlt-border|center]]
 +
 +
[[File:ISP1.png|border|class=tlt-border|center|800x600px]]
 +
 +
==External links==
 +
 +
#https://wiki.teltonika-networks.com/view/Splitting_Network_Traffic_Via_Multiple_Interfaces

Latest revision as of 10:43, 4 July 2024

The information on this page is updated in accordance with the 00.07.07.1 firmware version .

Introduction

Policy-based routing (PBR) is a technique used in computer networking to direct network packets based on defined criteria beyond the standard destination-based routing. Unlike traditional routing, which forwards packets solely based on their destination address, PBR allows to customize routing decisions according to various factors.

With policy-based routing can implement specific rules or policies to dictate the path that packets should take through the network. This flexibility enables organizations to optimize traffic flow, prioritize certain types of traffic, enforce security measures, and manage network resources more efficiently.

Prerequisites & Topology

Before proceeding with the confuration, ensure that all requirements are met:

  1. Before starting you need to have 3 different WAN connections. In this case we are going to use: Wi-fi WAN, Wired WAN and Mobile WAN.These interfaces have to be preconfigured.
697225 topo2.png

Configuration

If you're having trouble finding this page or some of the parameters described here on your device's WebUI, you should turn on "Advanced WebUI" mode. You can do that by clicking the "Advanced" button, located at the top of the WebUI.

Networking rutos manual webui basic advanced mode 75.gif

Configuring VLANs

Open router‘s WebUI and navigate to Network → VLAN → Port Based configuration:

Port based VLAN

Add new VLANs by clicking Add Button.png and Make following changes:

  1. VLAN ID: 1 | lan1: Untagged | Lan2: Off | Lan3: Off | lan4: Untagged | Wan: Off
  2. VLAN ID: 3 | lan1: Off | Lan2: Untagged | Lan3: Off | lan4: Off | Wan: Off
  3. VLAN ID: 5 | lan1: Off | Lan2: Off | Lan3: Untagged | lan4: Off | Wan: Off


PBR VLAN.png

Configuring Different LAN Networks

Open router’s WebUI → Network → LAN click Pencil2.pngon current available LAN interface configuration:

LAN1 General Settings

Make the following changes:

  1. Enter Name : LAN_VLAN_ETH0
PBS LAN1 NAME.png

LAN1 Physical Settings

Make the following changes:

  1. Select Interface : eth0
PBS LAN1 PHYSICAL.png

Add new LAN netwrok by clicking Add Button.png and Make following changes:

LAN2 General Settings

Make the following changes:

  1. Enable Interface: on
  2. Enter Name : LAN_VLAN_3
  3. Enter IPV4 address: 192.168.3.1
  4. Select IPV4 netmask: 255.255.255.0
  5. Enable DHCPv4: on
PBS LAN3 GENERAL.png

LAN2 Physical Settings

Make the following changes:

  1. Select Interface : eth0.3
PBS LAN3 PHYSICAL.png

Add new LAN netwrok by clicking Add Button.png and Make following changes:

LAN3 General Settings

Make the following changes:

  1. Enable Interface: on
  2. Enter Name : LAN_VLAN_5
  3. Enter IPV4 address: 192.168.5.1
  4. Select IPV4 netmask: 255.255.255.0
  5. Enable DHCPv4: on
PBS LAN5 GENERAL.png

LAN3 Physical Settings

Make the following changes:

  1. Select Interface : eth0.5
PBS LAN5 PHYSICAL.png

After configuring all LAN interfaces the end result should look something like this:

PBS LAN CON1.png

Configuring Policy Based Routing

Open WebUI → Network → Routing → Policy based routing → Add new instance and create new instances for each available WAN in this case Wi-Fi WAN, Wired-WAN and Mobile:

Creating Wifi Wan Routing Table

Add new instance:

  1. Enter ID: 1
  2. Enter New configuration name: WifiWan
PBR IMAGE WIFI.png

click Add Button.png in the new window make following changes:

Static IPv4 Routes

click Add Button.png and aplly this to the route:

  1. Select Interface: WifiWan | Enter Target: 0.0.0.0 | Enter IPv4-Netmask: 0.0.0.0 | Enter IPv4-Gateway: 192.168.1.1 (Note: Use the Wi-Fi network's gateway. The current LAN gateway in use is 192.168.100.1. However, the correct gateway to route correctly will be the next hop address. This means the router gateway providing the Wi-Fi WAN should be used. In my case, this gateway is 192.168.1.1.)
PBR P ROUTE 111.png

Creating Wired Wan Routing Table

Add new instance:

  1. Enter ID: 3
  2. Enter New configuration name: WiredWan
PBS WAN ROUTE1.png

click Add Button.png in the new window make following changes:

Static IPv4 Routes

click Add Button.png and aplly this to the route:

  1. Select Interface: wan | Enter Target: 0.0.0.0 | Enter IPv4-Netmask: 0.0.0.0 | Enter IPv4-Gateway: 192.168.3.1
PBR P ROUTE 2.png

Creating Mobile Wan Routing Table

Add new instance:

  1. Enter ID: 5
  2. Enter New configuration name: MWan
PBR MOBILE 1.png

click Add Button.png in the new window make following changes:

Static IPv4 Routes

click Add Button.png and aplly this to the route:

  1. Select Interface:mob1s1a1 | Enter Target: 0.0.0.0 | Enter IPv4-Netmask: 0.0.0.0
PBS TABLES WAN.png

Creating Routing Rules for IPv4

Routing Rules for IPv4

By clicking Add Button.png create 3 rules under Routing Rules for IPv4 tab apply these changes to the rules:

Policy Rule 1
  1. Enter Priority: 1
  2. Select Incoming interface: LAN_VLAN_ETH0
  3. Select Outgoing interface: None
  4. Select Matched Traffic Action: Lookup Table
  5. Lookup Table: WifiWAN(1)
POLICY RULE 11.png
Policy Rule 2
  1. Enter Priority: 1
  2. Select Incoming interface: LAN_VLAN_3
  3. Select Outgoing interface: None
  4. Select Matched Traffic Action: Lookup Table
  5. Lookup Table: WiredWan(3)
POLICY RULE 2.png
Policy Rule 3
  1. Enter Priority: 1
  2. Select Incoming interface: LAN_VLAN_5
  3. Select Outgoing interface: None
  4. Select Matched Traffic Action: Lookup Table
  5. Lookup Table: MWan(5)
POLICY RULE 3.png

NOTE: Delete all Autimatic or unrelated routing rules

Configuration testing

Connect end device to physical port that is assingned to different routing policy. Open cmd and run this command: tracert 8.8.8.8, three physical ports that we assigned to diffrent Vlans route to 8.8.8.8 should be using different gateways and public addresses visit to check if address changes whatismyipaddress.

Public IP addresses that are used in my topology:

  1. WiFi WAN: 78.xxx.xxx.xxx
  2. Wired WAN: 213.xxx.xxx.xxx
  3. Mobile WAN: 84.xxx.xxx.xxx


Physical Port 1 Test Result

Test1.png
ISP1.png

Physical Port 2 Test Result

Test22.png
ISP2.png

Physical Port 3 Test Result

Test33.png
ISP3.png

Policy Based Routing on a single Host

Single Host Routing Topology

697224 topo1.png

Wired WAN Routing Policy Priority Change

Open WebUI → Network → Routing → Policy based routing → Routing Rules for IPv4 and click Pencil2.png on Policy Rule 2

Make following changes:

  1. Set Priority: 2
PBRSN.png

Creating New Routing Policy Rule

Open WebUI → Network → Routing → Policy based routing

Creating Single Node Routing Table Over WifiWan

Add new instance:

  1. Enter ID: 7
  2. Enter New configuration name: Node
Node 1 Table.png


click Add Button.png in the new window make following changes:

Static IPv4 Routes

click Add Button.png and aplly this to the route:

  1. Select Interface: WifiWan | Enter Target: 0.0.0.0 | Enter IPv4-Netmask: 0.0.0.0 | Enter IPv4-Gateway: 192.168.1.1
PBR P ROUTE 111.png

Routing Rules for IPv4

By clicking Add Button.png create rule under Routing Rules for IPv4 tab apply these changes to the rules:

Policy Rule 4
  1. Enter Priority: 1
  2. Select Incoming interface: LAN_VLAN_3
  3. Select Outgoing interface: None
  4. Enter Source subnet: 192.168.3.246/32
  5. Select Matched Traffic Action: Lookup Table
  6. Lookup Table: Node (7)
PR4.png

Testing the Policy Route

POLICY ROUTE.png
ISP1.png

External links

  1. https://wiki.teltonika-networks.com/view/Splitting_Network_Traffic_Via_Multiple_Interfaces
Retrieved from "https://wiki.teltonika-networks.com/index.php?title=Policy_Based_Routing&oldid=128514"