Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Question on policy routing

Hi, I'm have one qustion concerning policy routing (excuse me for my bad possible bad English). I need to reroute ip packet coming from, suppose Ethernet1 (ip address 172.16.200.1) with source address (SA) 172.16.100.2 and dest address (DA) 172.16.100.1. I need to reroute it to the outside interface that is physically Ethernet1 but logically - another interface (I use secondary IP address). Suppose this new destination IP address is 192.168.1.1, while the secondary ip address of Ethernet1 is 192.168.1.254.

The point is to translate this (172.16.100.1) address into another (suppose 10.25.100.1) and to encapsulate it into VPN-tunnel based upon 192.168.1.254 ->192.168.1.1 link.

The problem is that I defined ip policy on ethernet1 but the router (soho91, by the way) don't want even to check this packet on policy rules, it simply immediately forwards the packet back to the 172.16.100.0. And the question is^ how can I reroute ip packet from 172.16.100.2 coming from the subnet 172.16.100.0 and destined for 172.16.100.1 on, say, another interface?

Excuse me for the explanation I provided, I can supply configs if it can help.

Best regards, Amir Asfandyarov

8 REPLIES
Bronze

Re: Question on policy routing

hi

did you applied the policy to the interface ??

New Member

Re: Question on policy routing

Yes, I did.

access-list 103 permit ip host 172.16.100.2 host 172.16.100.1

route-map nat-loop permit 20

match ip address 103

set ip next-hop 192.168.1.1

Bronze

Re: Question on policy routing

hi

no what i mean you have to apply this on an interface (ip policy route-map nat-loop)

HTH

please do rate if it does clarify

New Member

Re: Question on policy routing

I have forgotten to paste this line into forum text-field.

I mean I had

"ip policy route-map nat-loop" in my config. It was not the case of the problem.

Thank you for help, anyway.

Bronze

Re: Question on policy routing

hi

can you post your config?

thanx

New Member

Re: Question on policy routing

Yes, of course, but I'll do it on Monday - i have no remote access to my test environment (i.e SOHO).

New Member

Re: Question on policy routing

I've added my config.

New Member

Re: Question on policy routing

q

107
Views
2
Helpful
8
Replies
CreatePlease login to create content