[c-nsp] PBR support on 6500 w/ VSS and on 4500 Sup6L-E

[Arie Vayner (avayner)]

Chuck,

For 6500 (with or without VSS) you can find some PBR information here:
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/con
figuration/guide/layer3.html

For 4500, look here:
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/53SG/conf
iguration/pbroute.html
(It has some specific references to SUP6E, but not only).

One thing you should do on the 6500 at least (never tested it on a 4500)
is to use something like this for next-hop tracking (track could be not
just for line-protocol, but other things):

track 1 interface GigabitEthernet3/1 line-protocol
 delay up 15
!
track 2 interface GigabitEthernet3/2 line-protocol
 delay up 15
!
route-map test2 permit 10
 match ip address 100
 set ip next-hop verify-availability 10.2.3.3 10 track 1
 set ip next-hop verify-availability 10.2.2.3 20 track 2

Arie


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Church, Charles
Sent: Wednesday, March 24, 2010 21:16
To: nsp-cisco
Subject: [c-nsp] PBR support on 6500 w/ VSS and on 4500 Sup6L-E

Anyone,

	Been looking around on Cisco's web site, trying to find out if
PBR (policy based routing) is supported on a VSS pair of 6500s and also
on the new 4500 Sup6L-E.  What I'm trying to accomplish is based on
source address, send traffic either via a normal path or use an
alternate next hop (I need to force certain traffic types through a FW,
security mandate).  The 4500 is on the other side, and needs to PBR the
return traffic, using opposite source/dest pairs.  I didn't find
anything that definitively said yes or no.
Software advisor leads me to believe it exists in Enterprise Services
for the 4500, but that image is for the Sup6-E as well, not sure if the
feature is really there for the 'L' version.  Just want to make sure.

Thanks,

Chuck