Skip to main content
krajaa
Staff
krajaa
Staff
September 11, 2020

Technical Tip: Allow MAC addresses to be used in SD-WAN rules and policy routes

  • September 11, 2020
  • 0 replies
  • 1793 views
Description
From v6.4.2,Users can select MAC addresses as the source in SD-WAN rules and policy routes.

This article describes how to process.

Scope
For version 6.4.2.

Solution
From CLI.

1) Configure the MAC address:
# config firewall address
    edit "mac-add"
        set type mac
        set start-mac 70:4c:a5:86:de:56
        set end-mac 70:4c:a5:86:de:56
    next
end
2)Configure the policy route:
# config router policy
    edit 3
        set srcaddr "mac-add"
        set gateway 15.1.1.34
        set output-device ha
    next
end
3) Configure the SD-WAN rule(can configure only from CLI):
# config system sdwan
    # config service
        edit 1
            set dst "all"
            set src "mac-add"
            set priority-members 1
        next
    end
end
To verify the policy route matching for a MAC address:
# diagnose ip proute match 3.1.1.34 70:4c:a5:86:de:56 port3 22 6
dst=3.1.1.34 src=0.0.0.0 smac=70:4c:a5:86:de:56 iif=11 protocol=22 dport=6
id=00000003 type=Policy Route
seq-num=3
From GUI.

1) Configure the MAC address:





2) Configure the policy route:




Terms & ConditionsAccessibility statement