cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
877
Views
0
Helpful
3
Replies

Basic Route-Map Configuration

davidhuynh5
Level 1
Level 1

I need assistance in creating a route-map that will filter all traffic coming from 10.8.5.0/24 and send it to the next hop (10.0.0.9). Right now, when I ping 2.2.2.2/32 it takes the blue path. I want to use route-map to force traffic orginating from 10.8.5.0/24 to take the red path. Attached is the network diagram and the configuration from a L3 switch (3550), which I'm using as a router. Thank you in advance.

2 Accepted Solutions

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

David

On your 3550 switch you have used the wrong route-map name ie. you have

interface FastEthernet0/46

description SA06 Fa0/0

no switchport

ip address 10.0.0.14 255.255.255.252

ip policy route-map pbr

speed 10

duplex full

spanning-tree portfast

!

but your policy map is called test ie.

route-map test permit 10

description route 10.8.5.0 to fa0/1

match ip address pbr

set ip next-hop 10.0.0.9

so under fa0/46 interface

SA01-R1(config)# int fa0/46

SA01-R1(config-if)# no ip policy route-map pbr

SA01-R1(config-if)# ip policy route-map test

Jon

View solution in original post

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello David,

two notes:

I wouldn't use the log option in the ACL used in the route-map this can be a problem in production

use debug ip policy to see PBR in effects

b) I don't understand Vlan3 that is on that switch but probablyou used it for test

the config looks like fine and also the place where you have applied inbound on link with sa6 is the right one

Hope to help

Giuseppe

View solution in original post

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

David

On your 3550 switch you have used the wrong route-map name ie. you have

interface FastEthernet0/46

description SA06 Fa0/0

no switchport

ip address 10.0.0.14 255.255.255.252

ip policy route-map pbr

speed 10

duplex full

spanning-tree portfast

!

but your policy map is called test ie.

route-map test permit 10

description route 10.8.5.0 to fa0/1

match ip address pbr

set ip next-hop 10.0.0.9

so under fa0/46 interface

SA01-R1(config)# int fa0/46

SA01-R1(config-if)# no ip policy route-map pbr

SA01-R1(config-if)# ip policy route-map test

Jon

Thanks Jon and Giuseppe, it worked. You guys are da man.

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello David,

two notes:

I wouldn't use the log option in the ACL used in the route-map this can be a problem in production

use debug ip policy to see PBR in effects

b) I don't understand Vlan3 that is on that switch but probablyou used it for test

the config looks like fine and also the place where you have applied inbound on link with sa6 is the right one

Hope to help

Giuseppe

Review Cisco Networking products for a $25 gift card