From: Kenneth R. Snell (ksnell@xxxxxxxxxxxxx)
Date: Tue Jan 04 2000 - 19:23:02 GMT-3
Correct me if I'm wrong but with ip local policy, all traffic originating from
that router will but subject to the policy.
Denton Bobeldyk wrote:
> That's correct, the route-map isn't doing anything constructive. It's just a
> replication of a more complex scenario, all I really want to try and do
> is make sure _all_ of my traffic doesn't get policy routed, which for some
> reason is happening...
>
> -Denny
>
> Brad Hedlund wrote:
>
> > Denny,
> >
> > I guess Im a little confused, maybe you can clarify the problem you are
> > trying to solve.
> >
> > In your configuration your saying "Take all traffic that has a next-hop of
> > 10.34.1.1 going out of Ethernet 0 and set its next-hop to 10.34.1.1"
> >
> > What has that accomplished?
> >
> > That route-map is doing nothing but getting in the way. Its not changing
> > anything.
> > Or, am I missing something?
> >
> > -Brad
> >
> > > Hello All,
> > > I have a single router that I setup for policy routing, but
> > > for some reason the route-map stmt is matching more than
> > > I sould like it to. The route-map doesn't do anything constructive,
> > > it's just a simplified version of another problem I was having.
> > > Below are the config and the ping with debug ip policy enabled:
> > >
> > >
> > > r6#sh ru
> > > Building configuration...
> > >
> > > Current configuration:
> > > !
> > > version 11.2
> > > no service password-encryption
> > > no service udp-small-servers
> > > no service tcp-small-servers
> > > !
> > > hostname r6
> > > !
> > > !
> > > ip subnet-zero
> > > no ip domain-lookup
> > > !
> > > interface Loopback0
> > > ip address 10.44.1.1 255.255.255.0
> > > !
> > > interface Loopback1
> > > ip address 10.44.2.1 255.255.255.0
> > > !
> > > interface Ethernet0
> > > ip address 10.4.1.1 255.255.0.0
> > > !
> > > interface Ethernet1
> > > ip address 10.34.1.2 255.255.0.0
> > > !
> > > router ospf 1
> > > network 10.34.1.2 0.0.0.0 area 3
> > > network 10.44.1.1 0.0.0.0 area 44
> > > network 10.44.2.1 0.0.0.0 area 44
> > > network 10.4.1.1 0.0.0.0 area 3
> > > area 3 virtual-link 10.34.1.1
> > > area 44 range 10.44.0.0 255.255.0.0
> > > !
> > > ip local policy route-map LOCALPOLICY
> > > no ip classless
> > > access-list 10 permit 10.34.1.1
> > > access-list 10 deny any
> > > route-map LOCALPOLICY permit 10
> > > match ip next-hop 10
> > > match interface Ethernet1
> > > set ip next-hop 10.34.1.1
> > > !
> > > route-map LOCALPOLICY deny 20
> > > !
> > > !
> > > line con 0
> > > exec-timeout 0 0
> > > length 0
> > > line vty 0 4
> > > login
> > > !
> > > end
> > >
> > > r6#
> > >
> > > r6#debug ip policy
> > > Policy routing debugging is on
> > > r6#ping 10.4.1.1
> > >
> > > Type escape sequence to abort.
> > > Sending 5, 100-byte ICMP Echos to 10.4.1.1, timeout is 2 seconds:
> > >
> > > IP: s=10.34.1.2 (local), d=224.0.0.5, len 64, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.34.1.2 (local), d=224.0.0.5 (Ethernet1), len 64,
> > > policy routed
> > > IP: local to Ethernet1 10.34.1.1
> > > IP: s=10.4.1.1 (local), d=224.0.0.5, len 64, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=224.0.0.5 (Ethernet1), len 64, policy routed
> > > IP: local to Ethernet1 10.34.1.1
> > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > IP: local to Ethernet1 10.34.1.1.
> > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > IP: local to Ethernet1 10.34.1.1.
> > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > IP: local to Ethernet1 10.34.1.1.
> > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > IP: local to Ethernet1 10.34.1.1.
> > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > IP: local to Ethernet1 10.34.1.1.
> > > Success rate is 0 percent (0/5)
> > > r6#
> > > IP: s=10.34.1.2 (local), d=224.0.0.5, len 64, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.34.1.2 (local), d=224.0.0.5 (Ethernet1), len 64,
> > > policy routed
> > > IP: local to Ethernet1 10.34.1.1
> > > IP: s=10.4.1.1 (local), d=224.0.0.5, len 64, policy match
> > > IP: route map LOCALPOLICY, item 10, permit
> > > IP: s=10.4.1.1 (local), d=224.0.0.5 (Ethernet1), len 64, policy routed
> > > IP: local to Ethernet1 10.34.1.1u all
> > > All possible debugging has been turned off
> > > r6#
> > >
> > >
> > >
> > >
> > > --
> > > -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
> > > Denton Bobeldyk MCNE, CCDA, CCNA, CCSI
> > > Email: denny@kentwoodps.org
> > > Phone: 616-530-9196
> > >
> > > Master CNE - Connectivity
> > > Cisco Certified Design Associate
> > > Cisco Certified Network Associate
> > > Cisco Certified Systems Instructor
> > >
> > >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:22:43 GMT-3