[c-nsp] 4503 route-map problem
gokhan senol
gokhanciscottl at yahoo.com
Wed May 23 03:04:45 EDT 2007
hi
i have two 4503 switches that connected eachother via wireless.
both side has their internet connection. but side A has metro ethernet and what i wanna do is that divert sideB's http traffic to metroE on side A
for that reason i made the config below on sideB
10.1.1.101 is a JuniperFirewall which terminates metroE connection on sideA
other traffic which is not http should go out from sideB's internet connection.
vlan 20 >> 10.0.1.0
vlan 10 >> 10.1.0.0
i can reach i mean that i can ping 10.1.1.101 (my next hop for route-map) from the sideB switch and also all computers on sideB.
But when i check from whatismyip.com I see that my ip is not metroE but the sideB's internet ip.
it is not a ios problem coz it runs at another customer with same ios
ios cat4000-i9s-mz.122-25.EWA6.bin
what the problem can be. which parameters should i check
thansk a lot
interface Vlan20
description SIDE --- B ---
ip address 10.0.1.100 255.255.252.0
ip policy route-map http
access-list 111 deny tcp any 172.16.0.0 0.0.0.255
access-list 111 permit tcp any any eq www
access-list 111 permit tcp any any eq 443
!
route-map traffic permit 10
match ip address 111
set ip next-hop 10.1.1.101 (fw on sideA)
!
ip local policy route-map http
ip route 0.0.0.0 0.0.0.0 10.0.1.101 (fw on sideB)
ip route 10.1.0.0 255.255.252.0 192.168.100.1
sideA fw output
..........................................................
Send ICMP echos to 10.0.1.5, timeout is 2 seconds, maximum hops are 32
1 2ms 1ms 1ms 10.1.1.100
2 16ms 22ms 20ms 192.168.100.101
3 1ms 2ms 1ms 10.0.1.5 (pc from sideB)
Trace complete
NSGW->
..............................................................
sideB switch ping test
4503#ping 10.1.1.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.101, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/7/28 ms
4503#
____________________________________________________________________________________Ready for the edge of your seat?
Check out tonight's top picks on Yahoo! TV.
http://tv.yahoo.com/
More information about the cisco-nsp
mailing list