Redirect VLAN traffic

[daniel.bowen]

If I have a 5500 with three VLANS all connected to the RSM over internal trunk links, how can I configure all traffic say on VLAN 2 going to VLAN 3, to be directed to VLAN 4 where there is a FW? All routes are directly connected hence they have a metric of 0.

Any ideas?

[Gilles Dufour]

the only way to do such a thing is to use policy routing.

You create a route-map to match all traffic on interface vlan 2 and you set the next-hop to be your firewall on vlan4.

ie:

route-map test permit 10

match ip add 101

set ip next-hop firewall

!

interface vlan2

ip policy route-map test

!