[f-nsp] VIPs on multiple subnets
Scott T. Cameron
routehero at gmail.com
Sat Mar 12 13:30:51 EST 2011
You can use PBR on the interfaces to ensure that your next-hop is how you
want it.
something like..
access-list 10 permit ip 10.10.10.0 0.0.0.255 any
route-map DMZ1 permit 10
match ip address 10
set ip next-hop 10.10.10.254
Where 10.10.10.254 is the gateway of your choice for that network.
You can put this on the VE closest to the servers, but it really depends on
your routing setup more than anything.
Scott
On Sat, Mar 12, 2011 at 12:36 AM, Tom Banner <tom.banner.15 at gmail.com>wrote:
> I'm running an si450 with router code (boot image 10.2) and can't get VIPs
> on multiple subnets to work.
>
> I have 3 default networks defined (ip default-network). One /24 and two /29
> networks. I also have a default route for the /24 defined.
>
> When the default route is in place, only the /24 VIPs work. If I remove
> the default route, VIPs on all three networks work but there is a slight
> delay. If I reboot the si450 then none of the VIPs work. It seems the routes
> are cached when I remove the default route, which makes it all work but
> unreliably.
>
> How can I have VIPs in 3 different subnets with their own gateway?
>
>
>
>
> _______________________________________________
> foundry-nsp mailing list
> foundry-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/foundry-nsp
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20110312/461a6718/attachment.html>
More information about the foundry-nsp
mailing list