Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

access lists on the n5/7k

Hello all,

I wanted to place policy based routing on an vlan interface (10 in this case) with following configuration and expected that the next-hop ip of any packet received or sourced by the vlan interface 10 should be replaced with 10.10.10.2. But nothing happens.What I'm doing wrong respectively which part of the concept I do not understand :-)?

feature pbr

ip access-list test

  5 permit ip any any log

  10 permit ip any any

route-map test permit 10

  match ip address test

  set ip next-hop 10.10.10.2

interface Vlan10

  no shutdown

  ip address 10.10.10.1/24

  ip policy route-map test

---------debug--------

2013 Oct  4 20:27:58.978201 netstack: [10812] (default) Send packet on Vlan10 (mbuf_prty 7): s=10.10.10.1, d=10.10.10.3, nh=10.10.10.3, proto=17 (udp), ip_len=76, id=5373, ttl=255

2013 Oct  4 20:27:58.978251 netstack: [10812] (default) sending out on member port-channel2

2013 Oct  4 20:28:00.977795 netstack: [10812] (default) Rcvd packet on Vlan10 (mbuf_prty 0): s=10.10.10.3, d=10.10.10.1, proto=17 (udp), ip_len=76, id=3517, ttl=64

2013 Oct  4 20:28:00.978198 netstack: [10812] (default) Send packet on Vlan10 (mbuf_prty 7): s=10.10.10.1, d=10.10.10.3, nh=10.10.10.3, proto=17 (udp), ip_len=76, id=5376, ttl=255

2013 Oct  4 20:28:00.978247 netstack: [10812] (default) sending out on member port-channel2

--------------------

239
Views
0
Helpful
0
Replies
CreatePlease to create content