Question on policy routing

[uralsib]

Hi, I'm have one qustion concerning policy routing (excuse me for my bad possible bad English). I need to reroute ip packet coming from, suppose Ethernet1 (ip address 172.16.200.1) with source address (SA) 172.16.100.2 and dest address (DA) 172.16.100.1. I need to reroute it to the outside interface that is physically Ethernet1 but logically - another interface (I use secondary IP address). Suppose this new destination IP address is 192.168.1.1, while the secondary ip address of Ethernet1 is 192.168.1.254.

The point is to translate this (172.16.100.1) address into another (suppose 10.25.100.1) and to encapsulate it into VPN-tunnel based upon 192.168.1.254 ->192.168.1.1 link.

The problem is that I defined ip policy on ethernet1 but the router (soho91, by the way) don't want even to check this packet on policy rules, it simply immediately forwards the packet back to the 172.16.100.0. And the question is^ how can I reroute ip packet from 172.16.100.2 coming from the subnet 172.16.100.0 and destined for 172.16.100.1 on, say, another interface?

Excuse me for the explanation I provided, I can supply configs if it can help.

Best regards, Amir Asfandyarov

[kamal-learn]

hi

did you applied the policy to the interface ??

[uralsib]

Yes, I did.

access-list 103 permit ip host 172.16.100.2 host 172.16.100.1

route-map nat-loop permit 20

match ip address 103

set ip next-hop 192.168.1.1

[kamal-learn]

hi

no what i mean you have to apply this on an interface (ip policy route-map nat-loop)

HTH

please do rate if it does clarify

[uralsib]

I have forgotten to paste this line into forum text-field.

I mean I had

"ip policy route-map nat-loop" in my config. It was not the case of the problem.

Thank you for help, anyway.

[kamal-learn]

hi

can you post your config?

thanx

[uralsib]

Yes, of course, but I'll do it on Monday - i have no remote access to my test environment (i.e SOHO).

[uralsib]

I've added my config.

[rajivrajan1]

q