04-12-2007 02:19 PM - edited 03-05-2019 03:26 PM
I am trying to use route maps to change the next hop address for traffic matching a certain criteria and apply the ip policy to a vlan interface rather than a physical interface. The network consists of 6506's with sup2's running native ios. Unfortunately I have been unsuccessful so far! All traffic routes through vlan 476 and on to a main production router, address 10.192.192.100. I want to make certain traffic route to another data migration router, 10.192.192.101.
Even though eigrp and redistributed statics are used I cannot add more routes as I need the granularity of making certain traffic route to the data migration router, keeping it from going across the main production WAN link whilst keeping other traffic going to the same destination using the production router.
Here is the basic config I am using.
route-map iplc-traffic permit 10
match ip address iplc
set ip next-hop 10.192.192.101
ip extended access-list iplc permit ip host 172.16.2.200 host 10.70.125.3
int vlan 476
ip address 10.192.192.1 255.255.255.0
ip policy route-map iplc-traffic
int vlan 2
ip add 172.16.0.0 255.255.0.0
router eigrp 1
network 172.16.0.0
network 10.192.192.0
ip route 10.64.0.0 255.255.0.0 10.192.192.100
If I look at the route map it shows no traffic has been policy routed and looking at the access-list shows no packets hitting it.
If anyone can help it would be much appreciated
Many thanks.
Paul.
04-12-2007 03:49 PM
try enabling local PBR.
ip local policy route-map
04-12-2007 04:22 PM
Paul,
You need to apply the policy routing on vlan2 int. Policy routing works on the inbound direction only.
This should do it...
int vlan 2
ip policy route-map iplc-traffic
HTH
Sundar
04-13-2007 04:34 AM
Thanks Sundar, now works a treat!! I guess my understanding of how access-lists work on 6500's was wrong.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide