Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

Policy Based Routing on 2620

We have two routers: a Cisco 1721 and a Cisco 2620. Right now the 1721 is doing policy based routing to route traffic from a certain IP address ( out a different internet link. If I put the exact same config on the 2620 router, traffic to the second link does not flow. Network traces show the routing and NAT working but the next hop ( does not return the traffic. I can see the ARP request from but the 2620 does not answer. Below is the relevant config of the 2620.

interface FastEthernet0/0

ip address

ip nat inside

ip policy route-map Policy1

interface FastEthernet0/1

ip address

ip nat outside

ip nat inside source static

ip route

access-list 2 permit

route-map Policy1 permit 10

match ip address 2

set ip next-hop

About the only thing different other than the router model is that the 1721 only has one Fast Ethernet interface on it so it has a 4-port Fast Ethernet Switch WAN Interface Card installed in it.

Any ideas on why this isn't working would be greatly appreciated!


Re: Policy Based Routing on 2620


What's with the static route to Thats a directly connected network of interface fa0/1, so you dont need a static route.

If you do a sh ip ro, Im sure the route will show as "directly connected" and your static route, with the higher AD of 1, wont be in the routing table anyway.

Also, is ARPing for the address (this is the new source address after the address is NAT'ed) because it thinks the host is directly connected to its interface (same subnet), but it's not. This is why I believe the router is not replying to the ARP request for It doesnt own the address, and doesnt have it in its ARP table.

Can you NAT to a different host address -- other than, perhaps even the address?


New Member

Re: Policy Based Routing on 2620

That static route is not needed and no longer present. A case of not thinking clearly when I set this up 18 months ago.

The change of the static NAT to the IP address on Fa 0/1 worked.

Million dollar question...why would have the VLAN interface on the 1721 have responded to the ARP request for the

Thanks for the suggestion and speedy reply. It is greatly appreciated!

CreatePlease to create content