From: Michael Bramm (mbramm@xxxxxxxxxx)
Date: Fri Jan 07 2000 - 18:30:37 GMT-3
Hey,
It looks like you don't have the route-map associated with an interface.
mike
"Kenneth R. Snell" wrote:
> Correct me if I'm wrong but with ip local policy, all traffic originating fro
m
> that router will but subject to the policy.
>
> Denton Bobeldyk wrote:
>
> > That's correct, the route-map isn't doing anything constructive. It's just
a
> > replication of a more complex scenario, all I really want to try and do
> > is make sure _all_ of my traffic doesn't get policy routed, which for some
> > reason is happening...
> >
> > -Denny
> >
> > Brad Hedlund wrote:
> >
> > > Denny,
> > >
> > > I guess Im a little confused, maybe you can clarify the problem you are
> > > trying to solve.
> > >
> > > In your configuration your saying "Take all traffic that has a next-hop o
f
> > > 10.34.1.1 going out of Ethernet 0 and set its next-hop to 10.34.1.1"
> > >
> > > What has that accomplished?
> > >
> > > That route-map is doing nothing but getting in the way. Its not changing
> > > anything.
> > > Or, am I missing something?
> > >
> > > -Brad
> > >
> > > > Hello All,
> > > > I have a single router that I setup for policy routing, but
> > > > for some reason the route-map stmt is matching more than
> > > > I sould like it to. The route-map doesn't do anything constructive,
> > > > it's just a simplified version of another problem I was having.
> > > > Below are the config and the ping with debug ip policy enabled:
> > > >
> > > >
> > > > r6#sh ru
> > > > Building configuration...
> > > >
> > > > Current configuration:
> > > > !
> > > > version 11.2
> > > > no service password-encryption
> > > > no service udp-small-servers
> > > > no service tcp-small-servers
> > > > !
> > > > hostname r6
> > > > !
> > > > !
> > > > ip subnet-zero
> > > > no ip domain-lookup
> > > > !
> > > > interface Loopback0
> > > > ip address 10.44.1.1 255.255.255.0
> > > > !
> > > > interface Loopback1
> > > > ip address 10.44.2.1 255.255.255.0
> > > > !
> > > > interface Ethernet0
> > > > ip address 10.4.1.1 255.255.0.0
> > > > !
> > > > interface Ethernet1
> > > > ip address 10.34.1.2 255.255.0.0
> > > > !
> > > > router ospf 1
> > > > network 10.34.1.2 0.0.0.0 area 3
> > > > network 10.44.1.1 0.0.0.0 area 44
> > > > network 10.44.2.1 0.0.0.0 area 44
> > > > network 10.4.1.1 0.0.0.0 area 3
> > > > area 3 virtual-link 10.34.1.1
> > > > area 44 range 10.44.0.0 255.255.0.0
> > > > !
> > > > ip local policy route-map LOCALPOLICY
> > > > no ip classless
> > > > access-list 10 permit 10.34.1.1
> > > > access-list 10 deny any
> > > > route-map LOCALPOLICY permit 10
> > > > match ip next-hop 10
> > > > match interface Ethernet1
> > > > set ip next-hop 10.34.1.1
> > > > !
> > > > route-map LOCALPOLICY deny 20
> > > > !
> > > > !
> > > > line con 0
> > > > exec-timeout 0 0
> > > > length 0
> > > > line vty 0 4
> > > > login
> > > > !
> > > > end
> > > >
> > > > r6#
> > > >
> > > > r6#debug ip policy
> > > > Policy routing debugging is on
> > > > r6#ping 10.4.1.1
> > > >
> > > > Type escape sequence to abort.
> > > > Sending 5, 100-byte ICMP Echos to 10.4.1.1, timeout is 2 seconds:
> > > >
> > > > IP: s=10.34.1.2 (local), d=224.0.0.5, len 64, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.34.1.2 (local), d=224.0.0.5 (Ethernet1), len 64,
> > > > policy routed
> > > > IP: local to Ethernet1 10.34.1.1
> > > > IP: s=10.4.1.1 (local), d=224.0.0.5, len 64, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=224.0.0.5 (Ethernet1), len 64, policy routed
> > > > IP: local to Ethernet1 10.34.1.1
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > > IP: local to Ethernet1 10.34.1.1.
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > > IP: local to Ethernet1 10.34.1.1.
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > > IP: local to Ethernet1 10.34.1.1.
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > > IP: local to Ethernet1 10.34.1.1.
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1, len 100, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=10.4.1.1 (Ethernet1), len 100, policy routed
> > > > IP: local to Ethernet1 10.34.1.1.
> > > > Success rate is 0 percent (0/5)
> > > > r6#
> > > > IP: s=10.34.1.2 (local), d=224.0.0.5, len 64, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.34.1.2 (local), d=224.0.0.5 (Ethernet1), len 64,
> > > > policy routed
> > > > IP: local to Ethernet1 10.34.1.1
> > > > IP: s=10.4.1.1 (local), d=224.0.0.5, len 64, policy match
> > > > IP: route map LOCALPOLICY, item 10, permit
> > > > IP: s=10.4.1.1 (local), d=224.0.0.5 (Ethernet1), len 64, policy routed
> > > > IP: local to Ethernet1 10.34.1.1u all
> > > > All possible debugging has been turned off
> > > > r6#
> > > >
> > > >
> > > >
> > > >
> > > > --
> > > > -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
> > > > Denton Bobeldyk MCNE, CCDA, CCNA, CCSI
> > > > Email: denny@kentwoodps.org
> > > > Phone: 616-530-9196
> > > >
> > > > Master CNE - Connectivity
> > > > Cisco Certified Design Associate
> > > > Cisco Certified Network Associate
> > > > Cisco Certified Systems Instructor
> > > >
> > > >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:22:43 GMT-3