Policy Routing provides a tool that enables network administrators to define different routing policies based on SRC/DST IP and special hosts or services, and also to set the effective time. For example, sometimes we want different business traffic to pass through different WAN ports, all HTTP traffic needs to go through WAN1, and FTP traffic will go through WAN2. To meet this requirement, we can set policy routing rules on the router to specify the traffic path according to the business. Take the following topology as an example, we will learn how to configure the Policy Routing on the Omada SDN Controller.

 

 

Equipment

 

• 2 x PC (PC 1 with Controller, PC 2 for testing)

• 1 x Router (ER605)

• 1 x Switch (TL-SG2210MP)

 

 

Network Topology

 

 

 

 

Configuration Steps

 

The company consists of Department A (192.168.10.1/24) and Department B (192.168.20.1/24). Now the company has applied for two IPs from the ISP. To make full use of network resources, the company decided to allow Department A to access the Internet through the WAN port, and allow Department B to access the Internet through the WAN/LAN 1 port.

 

1. Go to Settings->Wired Networks->Internet to create WAN and WAN/LAN 1 on PC 1’s Software Controller.

        

 

 

2. Go to Settings->Wired Networks->LAN->Networks to create VLAN Interface for Department A and Department B.

 

1) Configure the basic parameters for the VLAN Interface.

 

Department A:

• Specify the Purpose as Interface.

• Select all LAN Interfaces.

• Specify the VLAN as 10.

• Specify the Gateway/Subnet as 192.168.10.1/24.

• Enable the DHCP Server.

• Specify the DHCP Range as 192.168.10.1-192.168.10.254

Finally, click on Save. 

 

 

 

 

Department B:

• Specify the Purpose as Interface.
• Select all LAN Interface.
• Specify the VLAN as 20.
• Specify the Gateway/Subnet as 192.168.20.1/24.
• Enable the DHCP Server.
• Specify the DHCP Range as 192.168.20.1-192.168.20.254

Finally, click on Save.

 

 

 

 

 

 

2) Go to Settings->Transmission->Routing->Policy Routing to load the following screen. Click Create New Routing.

 

 

3) Configure the basic parameters for the Policy Routing of Department A.

• Specify the Protocols as All.
• Specify the WAN as WAN.
• Specify the Source Type as the Network and click on Department A.
• Specify the Destination Type as IP Group and click on IPGroup_Any.

Click Apply.

 

 

 

 

4) Configure the basic parameters for the Policy Routing of Department B.

• Specify the Protocols as All.
• Specify the WAN as WAN/LAN1.
• Specify the Source Type as Network and click on Department B.
• Specify the Destination Type as IP Group and click on IPGroup_Any.

Click Apply.

 

 

 

 

5) Now the two Policy Routing rules have been successfully created.

 

 

3. Go to Devices and Click on TL-SG2210MP, Click on Ports, and Click Edit for Port 3  because PC 2 is connecting to Port 3 now. Specify the Profile as Department A to make PC 2 get a valid IP address like 192.168.10.3 from VLAN 10.

 

 

 

 

Test Verification

 

Since we have set policy routing rules, the traffic of the WAN port will flow to Department A, and the traffic of the WAN/LAN1 port will flow to Department B. Now we can download the Omada Controller on PC 2 in Department A to observe the flow of data packets. As can be seen from the following two figures, the data packets downloaded by the WAN port are much larger than those downloaded by the WAN/LAN1 port, and it can be considered that the policy routing configuration is successful.

 

WAN:                                                                                                               WAN/LAN1: