
Network Configuration
Policy Routing
Routing is the process of selecting the network path to use when one device (the source) sends a packet to
another device (the destination) on the network. The other device can be on a subnet that is directly connected to
Equalizer, or it may be on a remote subnet.
To communicate with a device that resides on a directly connected IP subnet (that is, both devices are in the same
broadcast domain
), any network device uses the information in its Address Resolution Protocol (ARP) table to
send packets directly to the destination IP address.
In order to send packets to a destination on a different network, the packet is instead sent a “next-hop” device,
usually a router, that determines how to forward it further. If the routing device is present on the same network as
the destination, it can send the packet directly to the destination. Otherwise, it forwards it on to another router, and
the process continues.
Equalizer provides the ability to configure routing to match network topologies from the simplest to the very
complex through
policy routing
. Policy routing gives the administrator the ability to completely define routing
behavior for each subnet, based on either the
destination IP address
or the
source IP address
of the packet leaving
Equalizer.
Destination and Source Based Routing
The figure below represents a basic IP network routing path where data packets traverse to and from hosts,
switches and routers. Policies are configured through administrative control to route packets through the desired
devices over subnets and on to servers and clients.
When a device needs to send an IP packet to a different device, it performs the following:
1. If the destination address is located locally (on the sender device) it sends the packet using the Operating
System and not the network.
2. If the packet isn't intended for this device the system routing table is checked for instructions on how to
deliver the packet, usually through a routing table.
Routing tables are searched in a
most-specific
to
least-specific
manner. If no packet delivery rules are found, a
packet will be discarded. The least-specific entry in a routing table is usually the default route, which essentially
provides a route to use if no specific matching entry has been found.
Most network devices route packets solely on the basis of the destination address in the packets. Some devices,
like Equalizer, can route packets based on the source address as well, and can completely specify the network
path a packet will take. This is called source-based routing.
Equalizer uses a combination of source routing tables and the cluster spoof option to route packets through the
network. Possible routing schemes are presented herein describing packet source-based routing and how they are
110
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Komentáře k této Příručce