[c-nsp] ASR 9K + source based routing

Nemeth Laszlo csirek at cooler.hu
Thu Apr 6 04:54:18 EDT 2017


Hi All,

I have a ASR9K1 with IOS XR 4.3.2 . Yes i know it is an old image, but 
rock stable in our environment.

Today a made a source based routing: if the source packet is comming 
from 1.1.1.0/24 range the nexthop have to be 2.2.2.2

The config is this:

RP/0/RSP0/CPU0:asr01#sh run interface bundle-ether 100.79

interface Bundle-Ether100.79
  description V79
  mtu 9164
  ipv4 mtu 9100
  ipv4 address 10.0.0.1 255.255.255.0
  load-interval 30
  encapsulation dot1q 79
  ipv4 access-group acl_vlan79_in ingress


This bundle interface is the Te 0/0/2/0 and 0/0/2/1


I use netflow on interface Te 0/0/2/2 and 0/0/2/3 just for info....

The acl_vlan79 is this:

RP/0/RSP0/CPU0:asr01#sh access-lists acl_vlan79_in

ipv4 access-list acl_vlan79_in
  55 permit ipv4 1.1.1.0 0.0.0.255 any nexthop1 ipv4 2.2.2.2
  100 deny ipv4 any any

But it doesn't work, the packet goes to the default gateway. The 2.2.2.2 
nexthop is a connected IP on interface BE 100.2 (this interface ip 
address is  2.2.2.1/28)

RP/0/RSP0/CPU0:asr01#sh access-lists ipv4 acl_vlan79_in hardware ingress 
location 0/0/CPU0

ipv4 access-list acl_vlan79_in
  55 permit ipv4 1.1.1.0 0.0.0.255 any (11011457 hw matches)
  100 deny ipv4 any any (1292262 hw matches)

So in the ACL doesn't show the nexthop the end of the line of 55 like 
the examples 
(https://supportforums.cisco.com/document/145271/abf-acl-based-forwarding-asr9k) 
shows me.

Any idea what is the wrong?

Thanks
Laszlo


More information about the cisco-nsp mailing list