The next hop is correct because packet from 10 to 20 must be processed by 192.168.20.253 and pachet from 20 to 10 must be processed by 192.168.10.253.
I solved the problem by correct use the access-list
interface Vlan10 ip address 192.168.10.253 255.255.255.0 ip pim sparse-dense-mode ip policy route-map Vlan_10 ! interface Vlan20 ip address 192.168.20.253 255.255.255.0 ip pim sparse-dense-mode ip policy route-map Vlan_20 ! access-list 101 deny ip 192.168.10.0 0.0.0.255 192.168.10.0 0.0.0.255 access-list 101 deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255 access-list 101 permit ip 192.168.10.0 0.0.0.255 any access-list 102 deny ip 192.168.20.0 0.0.0.255 192.168.20.0 0.0.0.255 access-list 102 deny ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255 access-list 102 permit ip 192.168.20.0 0.0.0.255 any route-map Vlan_20 permit 10 match ip address 102 set ip next-hop 192.168.20.254 ! route-map Vlan_10 permit 10 match ip address 101 set ip next-hop 192.168.10.254
[toc:faq]The ProblemOn traditional switches whenever we have a trunk
interface we use the VLAN tag to demultiplex the VLANs. The switch needs
to determine which MAC Address table to look in for a forwarding
decision. To do this we require the switch to do...
[toc:faq]Introduction:Netdr is a tool available on a RSP720, Sup720 or
Sup32 that allows one to capture packets on the RP or SP inband. The
netdr command can be used to capture both Tx and Rx packets in the
software switching path. This is not a substitut...
IntroductionOSPF, being a link-state protocol, allows for every router
in the network to know of every link and OSPF speaker in the entire
network. From this picture each router independently runs the Shortest
Path First (SPF) algorithm to determine the b...