[c-nsp] Pkt forwarding query

Devon True devon at noved.org
Mon Nov 2 15:46:46 EST 2015


Hi Hank,

I use ABF to take traffic out of a GRE tunnel and forward out a physical 
interface, so I would imagine the reverse may work.

--
Devon

> Hank Nussbacher <mailto:hank at efes.iucc.ac.il>
> November 2, 2015 at 3:25 PM
> At 14:40 02/11/2015 -0500, Chuck Church wrote:
>
> Perhaps ABF:
> http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r3-9-1/general/release/notes/rlse_a9k_392.html#wp433672 
>
>
> ipv4 access-list security-abf-acl
> 10 permit ipv4 any any nexthop 40.1.1.2
> ! where 40.1.1.2 is the tunnel interface IP
>
> interface gi 0/0/0/1
> ipv4 access-group security-abf-acl ingress
>
> would this work?
>
> -Hank
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> Hank Nussbacher <mailto:hank at efes.iucc.ac.il>
> November 2, 2015 at 2:18 PM
> I am looking for a simple solution on IOS-XR where each and every pkt 
> that comes out of a specific interface (Gi0/1) would be auto-fwded 
> into tunnel0 (uni-directional only).  No routing decisions, no BGP 
> lookup, no static routing, no FIB, no RIB, just some sort of auto-fwd 
> rule which would bypass the router entirely.  Possible?
>
> Thanks,
> Hank
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> Hank Nussbacher <mailto:hank at efes.iucc.ac.il>
> November 2, 2015 at 2:18 PM
> I am looking for a simple solution on IOS-XR where each and every pkt 
> that comes out of a specific interface (Gi0/1) would be auto-fwded 
> into tunnel0 (uni-directional only).  No routing decisions, no BGP 
> lookup, no static routing, no FIB, no RIB, just some sort of auto-fwd 
> rule which would bypass the router entirely.  Possible?
>
> Thanks,
> Hank
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>



More information about the cisco-nsp mailing list