[c-nsp] ASR9000 ABF question

Hank Nussbacher hank at efes.iucc.ac.il
Thu Jul 16 03:06:02 EDT 2015


Just to add to the info I see:

RP/0/RSP0/CPU0:GP1#show access-lists ipv4 catch hardware ingress location 
0/1/cpu0
Thu Jul 16 10:03:09.876 IDT
ipv4 access-list catch
  10 permit ipv4 host 111.107.97.111 any (next-hop: addr=128.139.217.4, vrf 
name=default)
  20 permit ipv4 any any (2379554149452 hw matches)

-Hank



>I am trying to implement ABF on  a Cisco 9010 (v5.1.3):
>
>http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r3-9-1/general/release/notes/rlse_a9k_392.html#wp433672
>
>interface TenGigE0/1/1/7
>  ipv4 access-group catch ingress
>
>RP/0/RSP0/CPU0:GP1#show ipv4 access-list catch
>Wed Jul 15 21:47:21.812 IDT
>ipv4 access-list catch
>  10 permit ipv4 host 111.107.97.111 any nexthop1 ipv4 128.139.217.4
>  20 permit ipv4 any any (14042 matches)
>
>Based on my understanding, any pkt that enters my network via 
>TenGigE0/1/1/7 with a srcIP=111.107.97.111 should be routed to 128.139.217.4.
>
>But when I do a simple http://111.107.97.111, the page opens normally - 
>meaning all the pkts from 111.107.97.111 are reaching me and not being 
>punted to 128.139.217.4.
>
>Clue?
>
>Thanks,
>-Hank



More information about the cisco-nsp mailing list