RE: PBR

From: Victor Cappuccio (cvictor@protokolgroup.com)
Date: Wed Aug 23 2006 - 19:51:03 ART


Tim, use the debug ip policy to see the result

For example using just

I get these debug messages, when I send an echo request with a 1500 of size

R1#
*Mar 1 03:52:02.159: IP: s=10.1.1.1 (Serial0/0.123), d=154.4.13.5, len
1500, FIB policy match
*Mar 1 03:52:02.159: IP: s=10.1.1.1 (Serial0/0.123), d=154.4.13.5,
g=154.1.25.3, len 1500, *FIB policy routed*

But if I do a normal ping I get this messages

*Mar 1 03:54:22.279: IP: s=10.1.1.1 (Serial0/0.123), d=154.4.13.5, len 100,
FIB policy rejected(no match) - normal forwarding

The lsgico f the route-map is simple, you permit what you what to police,
you deny to do normal forwarding

By default is something like
interface ether0/0
  ip policy route-map POLICY
!
route-map POLICY permit 10
  match length 1251 1500
  set ip next-hop 10.1.1.1
!
route-map POLICY deny !! no shown in the show run

thanks!
Victor.-

-----Mensaje original-----
De: nobody@groupstudy.com [mailto:nobody@groupstudy.com] En nombre de Tim
Chan
Enviado el: Miircoles, 23 de Agosto de 2006 06:10 p.m.
Para: ccielab@groupstudy.com
Asunto: PBR

Hi all,

When creating the route-maps for policy based routing, at the end is it a
permit any or deny any?

For example, I want to forward packets larger than 1250 towards a certain
direction, but all other packets
will go wherever they are normally routed. So at the end is it a "deny 20"
thinking that "I will not allow
other traffic to be policy routed." Or is it "permit 20" thinking that "I
will allow all other traffic to pass"?

interface ether0/0
  ip policy route-map POLICY
!
route-map POLICY permit 10
  match length 1251 1500
  set ip next-hop 10.1.1.1
!
route-map POLICY [permit / deny] 20

thanks!
-tim



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:58 ART