[c-nsp] ASR9K ABF

[Mohammad Khalil]

Hi all

I have a question regarding ABF setup on ASR9K

Should the ACL applied on an interface defines an IP range different than the IP address configured on the input interface?

For example:

ipv4 access-list ABF
10 permit ipv4 192.168.199.0/24 any nexthop1 vrf INSIDE-1 ipv4 9.9.9.2 nexthop2 vrf INSIDE-1-BACKUP ipv4 19.19.19.2
20 permit ipv4 any any

Now , the ingress interface is configured as below:

interface GigabitEthernet0/0/0/9
description Inside_Traffic
ipv4 address 192.168.199.1 255.255.255.0
ipv4 access-group ISM_ABF ingress


The ACL is not working , the IP address configured under the interface matches the IP address inside the ACL , could that be the reason for this not to work?


Thanks


BR,

Mohammad