[nsp] RE: Policy Based Routing

Tobias Seda nocadmin at nbi.ispkenya.com
Mon Feb 9 14:48:28 EST 2004


Hi

I am having trouble configuring PBR on a cisco 12.0(a17)T IOS, Cisco 1605R
for a small network running two frame relay sub-interfaces.

One Interface is carrying Internet traffic to an ISP while the other is
connecting to another remote office.

If I check packet counter on the route map for ISP I can see something, but
it seems like the packets are not leaving the router to the destination,
because I cannot ping any host on ISP network except the remote interface,
like wise to the other Interface.

Any idea out there..?

regards

Tobias

FYI
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

route-map traffic-redirect, permit, sequence 10
  Match clauses:
    ip address (access-lists): 1
  Set clauses:
    ip precedence priority
    ip next-hop 64.86.238.25
  Policy routing matches: 15579 packets, 2108650 bytes
route-map traffic-redirect, permit, sequence 20
  Match clauses:
    ip address (access-lists): 2
  Set clauses:
    ip precedence critical
    ip next-hop 10.1.1.5
  Policy routing matches: 16138 packets, 1099194 bytes
GiroLTD#
<><><><><<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><

interface Ethernet0
 ip address 192.168.111.1 255.255.255.0 secondary
 ip address 64.86.235.1 255.255.255.248 secondary
 ip address 132.0.0.54 255.255.255.0
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp
 ip policy route-map traffic-redirect
 fair-queue 64 256 0
!
interface Serial0
 no ip address
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp
 encapsulation frame-relay IETF
 ip route-cache policy
 ip policy route-map traffic-redirect
 no logging event subif-link-status
 no logging event dlci-status-change
!
interface Serial0.1 point-to-point
 description 64K Internet Link to ISPKenya.
 ip address 64.86.238.26 255.255.255.252
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp

GiroLTD#conf t
Enter configuration commands, one per line.  End with
GiroLTD(config)#int e0
GiroLTD(config-if)#no ip ad
GiroLTD(config-if)#no ip address 64.86.235.1 255.255.2
GiroLTD(config-if)#no ip address 64.86.235.1 255.255.2
GiroLTD(config-if)#end
GiroLTD#sh run
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname GiroLTD
!
enable secret 5 $1$RIOJ$XQP4haYXV4eaK8aS7oxV01
enable password 7 130C04020E0517
!
ip subnet-zero
no ip domain-lookup
ip domain-name ispkenya.com
ip name-server 212.49.87.2
ip name-server 64.86.231.5
!
!
!
interface Ethernet0
 ip address 192.168.111.1 255.255.255.0 secondary
 ip address 132.0.0.54 255.255.255.0
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp
 ip policy route-map traffic-redirect
 fair-queue 64 256 0
!
interface Serial0
 no ip address
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp
 encapsulation frame-relay IETF
 ip route-cache policy
 ip policy route-map traffic-redirect
 no logging event subif-link-status
 no logging event dlci-status-change
!
interface Serial0.1 point-to-point
 description 64K Internet Link to ISPKenya.
 ip address 64.86.238.26 255.255.255.252
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp
 frame-relay interface-dlci 22
!
interface Serial0.2 point-to-point
 description 64K Data Link to Reuters
 ip address 10.1.1.6 255.255.255.252
 no ip redirects
 no ip directed-broadcast
 no ip proxy-arp
 frame-relay interface-dlci 21
!
router rip
 network 10.0.0.0
 network 192.1.1.0
!
ip nat inside source list 1 interface Serial0.1 overlo
ip classless

[ip route 0.0.0.0 0.0.0.0 10.1.1.5] TEMPORARY 4 TEST

!
access-list 1 permit 132.0.0.0 0.0.0.255
access-list 2 permit 192.168.111.0 0.0.0.255
route-map traffic-redirect permit 10
 match ip address 1
 set ip precedence priority
 set ip next-hop 64.86.238.25
!
route-map traffic-redirect permit 20
 match ip address 2
 set ip precedence critical
 set ip next-hop 10.1.1.5
!
snmp-server community ispkpub RO
snmp-server community ispkpriv RW
!
line con 0
 transport input none
line vty 0 4
 password 7 112E101718300507490D3C
 login
!
end

GiroLTD#




More information about the cisco-nsp mailing list