From: Aaron DuShey (adushey@xxxxxxxxx)
Date: Mon Jul 24 2000 - 10:42:19 GMT-3
All the denys in the access-list are routes behind the policy route. I
figured since there were more routes to permit, I would deny all applicable
local routes and permit any else-
thanks-
Building configuration...
Current configuration:
!
version 11.3
no service password-encryption
!
hostname r3
!
enable secret
!
ip subnet-zero
ip tcp synwait-time 5
no ip domain-lookup
!
!
voice-port 2/0/0
!
voice-port 2/0/1
!
voice-port 2/1/0
!
voice-port 2/1/1
!
!
interface Ethernet0/0
no ip address
shutdown
no lat enabled
!
interface Serial0/0
ip address 10.10.1.3 255.255.0.0
encapsulation frame-relay
ip ospf priority 0
no ip mroute-cache
ip policy route-map frame
no fair-queue
frame-relay map ip 10.10.1.1 301 broadcast
!
interface TokenRing0/0
ip address 10.3.1.1 255.255.0.0
ring-speed 16
!
interface Serial0/1
ip address 10.34.1.1 255.255.0.0
clockrate 8000000
!
interface FastEthernet1/0
no ip address
shutdown
no lat enabled
!
router ospf 1
network 10.10.1.0 0.0.0.255 area 0
network 10.34.0.0 0.0.255.255 area 3
area 3 virtual-link 10.34.1.2
!
ip local policy route-map frame
ip classless
logging buffered 4096 debugging
access-list 100 deny ip any 10.3.0.0 0.0.255.255
access-list 100 deny ip any 10.34.0.0 0.0.255.255
access-list 100 deny ip any 10.44.0.0 0.0.255.255
access-list 100 deny ip any 10.4.0.0 0.0.255.255
access-list 100 permit ip any any
route-map frame permit 10
match ip address 100
set ip next-hop 10.10.1.1
!
!
r3#sh ip ospf neigh
Neighbor ID Pri State Dead Time Address Interface
10.10.1.1 1 FULL/DR 00:01:55 10.10.1.1 Serial0/0
10.44.2.1 1 INIT/ - 00:00:34 10.34.1.2 Serial0/1
r3#conf t
Aaron DuShey
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Crouch, Keith
Sent: Sunday, July 23, 2000 6:11 PM
To: 'Aaron DuShey'; CCIE (E-mail)
Subject: RE: Policy routes
Can you post the configs? I believe a policy route overrides everything.
After matching the inbound packet to the route-map it switches the packet
to the next_hop configured in the route-map
> -----Original Message-----
> From: Aaron DuShey [SMTP:adushey@yahoo.com]
> Sent: Monday, July 24, 2000 3:00 AM
> To: CCIE (E-mail)
> Subject: Policy routes
>
> What priority(admin distance) do Policy routes have over other routes,
> such
> as Direct connects, OSPF, EIGRP etc..?
> I have a problem which I cannot ping a local loopback interface after
> configuring a policy route. Any suggestions?
> thanks,
>
> Aaron DuShey
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:57 GMT-3