From: Leigh Harrison (ccileigh@gmail.com)
Date: Sun Sep 24 2006 - 06:53:22 ART
All,
I'm trying to run policy routing over a 6509 without much success. The
switch will not take the route-map commands on the port-channel
interfaces which are layer 3, so I have put them on the gig interfaces.
Still no joy. I've also got it configured on a vlan interface and that's
not doing the trick either!!
My config is:-
ip access-list extended WanTraffic
deny ip 10.64.0.0 0.0.255.255 180.1.32.0 0.0.15.255
deny ip 10.64.0.0 0.0.255.255 180.1.96.0 0.0.31.255
permit ip 10.64.0.0 0.0.255.255 any
Standard IP access list WanStandard
10 deny 180.1.32.0, wildcard bits 0.0.15.255 (1384 matches)
20 deny 180.1.96.0, wildcard bits 0.0.31.255
30 permit 10.64.0.0, wildcard bits 0.0.255.255
route-map WanTraffic permit 10
match ip address WanTraffic
set ip next-hop 10.64.254.251
!
route-map WanTraffic permit 20
match ip address WanStandard
set ip next-hop 10.64.254.251
interface GigabitEthernet1/1
description ** Physical GF East link 1 **
no ip address
ip route-cache policy
ip policy route-map WanTraffic
logging event link-status
logging event bundle-status
logging event trunk-status
snmp ifindex persist
channel-group 2 mode on
interface Vlan1
ip address 180.1.32.244 255.255.240.0
ip route-cache policy
ip policy route-map WanTraffic
#sh route-map
route-map WanTraffic, permit, sequence 10
Match clauses:
ip address (access-lists): WanTraffic
Set clauses:
ip next-hop 10.64.254.251
Policy routing matches: 0 packets, 0 bytes
route-map WanTraffic, permit, sequence 20
Match clauses:
ip address (access-lists): WanStandard
Set clauses:
ip next-hop 10.64.254.251
Policy routing matches: 4942 packets, 5298548 bytes
#sh access-lists
Standard IP access list WanStandard
10 deny 180.1.32.0, wildcard bits 0.0.15.255 (909 matches)
20 deny 180.1.96.0, wildcard bits 0.0.31.255
30 permit 10.64.0.0, wildcard bits 0.0.255.255
Extended IP access list WanTraffic
10 deny ip 10.64.0.0 0.0.255.255 180.1.32.0 0.0.15.255
20 deny ip 10.64.0.0 0.0.255.255 180.1.96.0 0.0.31.255
100 permit ip 10.64.0.0 0.0.255.255 any
This is on a new 6509 and it's running destributed CEF - the version in
12.2x works with PBR
Any thoughts appreciated
LH
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:41 ART