My configuration is: interface GigabitEthernet3/1 ip address x.x.x.x y.y.y.y no ip directed-broadcast ip route-cache flow sampled input ip policy route-map SDS-PBR no negotiation auto
interface GigabitEthernet3/2 ip address x.x.x.x y.y.y.y
ip access-group DENY-ATTACK in no ip directed-broadcast ip route-cache flow sampled input load-interval 60 no negotiation auto
interface GigabitEthernet3/3 no ip address ip access-group DENY-ATTACK in no ip redirects no ip unreachables no ip directed-broadcast no ip proxy-arp ip route-cache flow sampled input load-interval 30 no negotiation auto no cdp enable
interface GigabitEthernet3/3.102 encapsulation dot1Q 100 ip address x.x.x.x y.y.y.y ip access-group DENY-ATTACK in no ip redirects no ip directed-broadcast no ip proxy-arp ip bgp fast-external-fallover permit bfd interval 50 min_rx 50 multiplier 20
interface GigabitEthernet4/0 no ip address no ip directed-broadcast ip route-cache flow sampled input load-interval 60 negotiation auto
interface GigabitEthernet4/0.101 encapsulation dot1Q 101 ip address x.x.x.x y.y.y.y no ip directed-broadcast
interface GigabitEthernet4/1 ip address x.x.x.x y.y.y.y no ip directed-broadcast ip route-cache flow sampled input ip policy route-map SDS-PBR load-interval 60 no negotiation auto
R-12406-2#sh route-map SDS-PBR route-map SDS-PBR, permit, sequence 10 Match clauses: ip address (access-lists): ACL Set clauses: ip next-hop x.x.x.x(G4/0.101) Policy routing matches: 64093899126 packets, 36251499723829 bytes
R-12406-2#sh run | in flow ip flow-cache timeout inactive 0 ip flow-cache timeout active 1 ip flow-sampling-mode packet-interval 128 ip flow-export source Loopback1 ip flow-export version 5 origin-as ip flow-export destination x.x.x.x 9996
The following are my test results provide analysis and comparison:
From the above data, you can see the interface G3/3.102, G4/0.101 flow,there is very large difference between the "Show interface" and "Collector Display".
I suspect the problem is caused by PBR
You have encountered similar problems?And how can I resolve this issue？
Look forward to your help,THANK YOU VERY VERY MUCH!!!
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...