Re: SVI PBR

From: Sean C. (Upp_and_Upp@hotmail.com)
Date: Tue Aug 29 2006 - 21:24:49 ART


Hi Tim,

For grins, change the ACLs to:
ip access-list extended route2blue
 permit icmp any any
 permit ip any any

and see if they get PBR'd. If 'any any' doesn't work, something strange
going on....

HTH,
Sean
----- Original Message -----
From: "Tim Gregory" <tgregory@lincoln.ac.uk>
To: <ccielab@groupstudy.com>
Sent: Tuesday, August 29, 2006 1:51 PM
Subject: RE: SVI PBR

For some reason, the only traffic which gets policy routed is broadcast
traffic originating from the matched subnet... Everything else is routed
normally.. Very confused..

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Tim Gregory
Sent: 29 August 2006 15:57
To: ccielab@groupstudy.com
Subject: SVI PBR

Hi Guys..

When you configure PBR on a SVI, does it behave normally?

Basically I've got a scenario where I need to take some traffic coming
from a particular subnet and force it down a gre tunnel, so I've
configured the interface like this..

interface Vlan24
 ip address 10.1.24.129 255.255.255.128
 ip helper-address 194.80.56.107
 ip route-cache policy
 ip policy route-map force-tunnel

route-map force-tunnel permit 10
 match ip address route2blue
 set ip next-hop 10.254.253.1

ip access-list extended route2blue
 permit icmp 10.1.24.128 0.0.0.127 any
 permit ip 10.1.24.128 0.0.0.127 any

But traffic still follows the normal ip routing table path, I can't for
the life of my figure out why its not being routed down the next hop of
10.254.253.1.... Im sure its something very basic :[

Thanks...



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:59 ART