First let me explain you about my topology, 5 vpc connecting to a switch and switch is connecting to LAN router and the router is connected to ISP router. In ISP router there are 4 loopback addresses and two connected ethernet interface using EIGRP.
I'm doing PBR based on source. I have created two access-list with the numbers 10 and 30
*Mar 1 01:32:44.107: IP: s=10.1.1.5 (FastEthernet0/0), d=126.96.36.199, len 84, FIB policy match *Mar 1 01:32:44.107: IP: s=10.1.1.5 (FastEthernet0/0), d=188.8.131.52, len 84, policy match *Mar 1 01:32:44.111: IP: route map AJAZ, item 20, permit
PC5> ping 184.108.40.206 --> from 10.1.1.5 ( It's pinging fine but the policy is getting rejected ) 84 bytes from 220.127.116.11 icmp_seq=1 ttl=254 time=21.002 ms 84 bytes from 18.104.22.168 icmp_seq=2 ttl=254 time=21.002 ms
*Mar 1 01:33:41.215: IP: s=10.1.1.6 (FastEthernet0/0), d=22.214.171.124, len 84, FIB policy match *Mar 1 01:33:41.219: IP: s=10.1.1.6 (FastEthernet0/0), d=126.96.36.199, len 84, FIB policy rejected - normal forwarding
Can someone please help me on this ? Did I misconfigured anything route-filtering method ( ACL or Route-map) ? Do i need to use any extra statement in ACL or Route-Map ?
I have attached my topology. Please have a look for better understanding.
Sets output interface for the packet. This action specifies that the packet is forwarded out of the local interface. The interface must be a Layer 3 interface (no switchports), and the destination address in the packet must lie within the IP network assigned to that interface. If the destination address for the packet does not lie within that network, the packet is dropped.
I was trying to access the different network rather than the network assigned on the interface. I used next-hop address and it was working fine.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...