From: Leigh Harrison (ccileigh@gmail.com)
Date: Sun Sep 24 2006 - 09:15:54 ART
All,
This is now sorted.
The port-channel that I tried to put the PBR config onto was layer 2!!
Schoolboy Error!!!
LH
Leigh Harrison wrote:
> All,
>
> I'm trying to run policy routing over a 6509 without much success.
> The switch will not take the route-map commands on the port-channel
> interfaces which are layer 3, so I have put them on the gig
> interfaces. Still no joy. I've also got it configured on a vlan
> interface and that's not doing the trick either!!
>
> My config is:-
> ip access-list extended WanTraffic
> deny ip 10.64.0.0 0.0.255.255 180.1.32.0 0.0.15.255
> deny ip 10.64.0.0 0.0.255.255 180.1.96.0 0.0.31.255
> permit ip 10.64.0.0 0.0.255.255 any
>
> Standard IP access list WanStandard
> 10 deny 180.1.32.0, wildcard bits 0.0.15.255 (1384 matches)
> 20 deny 180.1.96.0, wildcard bits 0.0.31.255
> 30 permit 10.64.0.0, wildcard bits 0.0.255.255
>
> route-map WanTraffic permit 10
> match ip address WanTraffic
> set ip next-hop 10.64.254.251
> !
> route-map WanTraffic permit 20
> match ip address WanStandard
> set ip next-hop 10.64.254.251
>
> interface GigabitEthernet1/1
> description ** Physical GF East link 1 **
> no ip address
> ip route-cache policy
> ip policy route-map WanTraffic
> logging event link-status
> logging event bundle-status
> logging event trunk-status
> snmp ifindex persist
> channel-group 2 mode on
>
> interface Vlan1
> ip address 180.1.32.244 255.255.240.0
> ip route-cache policy
> ip policy route-map WanTraffic
>
> #sh route-map
> route-map WanTraffic, permit, sequence 10
> Match clauses:
> ip address (access-lists): WanTraffic
> Set clauses:
> ip next-hop 10.64.254.251
> Policy routing matches: 0 packets, 0 bytes
> route-map WanTraffic, permit, sequence 20
> Match clauses:
> ip address (access-lists): WanStandard
> Set clauses:
> ip next-hop 10.64.254.251
> Policy routing matches: 4942 packets, 5298548 bytes
>
> #sh access-lists
> Standard IP access list WanStandard
> 10 deny 180.1.32.0, wildcard bits 0.0.15.255 (909 matches)
> 20 deny 180.1.96.0, wildcard bits 0.0.31.255
> 30 permit 10.64.0.0, wildcard bits 0.0.255.255
> Extended IP access list WanTraffic
> 10 deny ip 10.64.0.0 0.0.255.255 180.1.32.0 0.0.15.255
> 20 deny ip 10.64.0.0 0.0.255.255 180.1.96.0 0.0.31.255
> 100 permit ip 10.64.0.0 0.0.255.255 any
>
> This is on a new 6509 and it's running destributed CEF - the version
> in 12.2x works with PBR
>
> Any thoughts appreciated
> LH
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:41 ART