RE: SVI PBR

From: Max Bozeman (maxbozeman@excite.com)
Date: Tue Aug 29 2006 - 12:48:23 ART


Have never tried this on a switch, but if the tunnel is terminated on the switch, then here are a couple of suggestions:

1. If you are trying to send all IP traffic down the tunnel, then use a standard access-list.

2. Instead of setting next-hop, set the interface to the tunnel interface.

having said that without seeing the full config (and possibly labbing it) I couldn't tell you why yours is not working.

 --- On Tue 08/29, Tim Gregory < tgregory@lincoln.ac.uk > wrote:
From: Tim Gregory [mailto: tgregory@lincoln.ac.uk]
To: ccielab@groupstudy.com
Date: Tue, 29 Aug 2006 15:56:36 +0100
Subject: SVI PBR

Hi Guys..<br><br>When you configure PBR on a SVI, does it behave normally?<br><br>Basically I've got a scenario where I need to take some traffic coming<br>from a particular subnet and force it down a gre tunnel, so I've<br>configured the interface like this..<br><br>interface Vlan24<br> ip address 10.1.24.129 255.255.255.128<br> ip helper-address 194.80.56.107<br> ip route-cache policy<br> ip policy route-map force-tunnel<br><br>route-map force-tunnel permit 10<br> match ip address route2blue<br> set ip next-hop 10.254.253.1<br><br>ip access-list extended route2blue<br> permit icmp 10.1.24.128 0.0.0.127 any<br> permit ip 10.1.24.128 0.0.0.127 any<br><br><br><br><br>But traffic still follows the normal ip routing table path, I can't for<br>the life of my figure out why its not being routed down the next hop of<br>10.254.253.1.... Im sure its something very basic :[<br><br>Thanks...<br><br>_______________________________________________________________________<br>Subscription
information may be found at: <br>http://www.groupstudy.com/list/CCIELab.html>



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:59 ART