[c-nsp] Cat 3550 policy routing at layer 4

Andrea Montefusco andrea.montefusco at gmail.com
Wed Nov 4 08:23:33 EST 2009


Does anyone known if the Catalyst 3550 has a some restriction on policy routing ACL at layer 4 ?
In my lab the PBR works well if the route map acl is at layer 3 only

access-list 200 permit ip <src> <dst>

if I use an acl with layer four ACE, like

  access-list 200 permit tcp <src> <dst> eq 25

it doesn't work anymore.
The manual generically states that it is possible select the traffic via layer 4 parameters.
IOS 12.2.44 SE6

Thanks in advance

         *am*

------------------- cut here ----------------
...
interface Vlan20
   ip address 192.168.1.1 255.255.255.0
   ip route-cache policy
   ip policy route-map SPECIAL-ROUTES
...
access-list 200 permit tcp 192.168.1.0 255.255.255.0 any eq smtp
access-list 200 permit tcp 192.168.1.0 255.255.255.0 any eq pop3
!
route-map SPECIAL-ROUTES permit 5
   match ip address 200
   set ip next-hop 1.1.1.2
...
------------------- cut here ----------------

---------------------------------------------------------
Andrea Montefusco iw0hdv        http://www.montefusco.com
---------------------------------------------------------


More information about the cisco-nsp mailing list