You can use PBR on the interfaces to ensure that your next-hop is how you want it.<div><br></div><div>something like..</div><div><br></div><div>access-list 10 permit ip 10.10.10.0 0.0.0.255 any</div><div><br></div><div>route-map DMZ1 permit 10</div>
<div> match ip address 10</div><div> set ip next-hop 10.10.10.254</div><div><br></div><div>Where 10.10.10.254 is the gateway of your choice for that network.</div><div><br></div><div>You can put this on the VE closest to the servers, but it really depends on your routing setup more than anything.</div>
<div><br></div><div>Scott<br><br><div class="gmail_quote">On Sat, Mar 12, 2011 at 12:36 AM, Tom Banner <span dir="ltr"><<a href="mailto:tom.banner.15@gmail.com">tom.banner.15@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
I'm running an si450 with router code (boot image 10.2) and can't get VIPs on multiple subnets to work.<br>
<br>
I have 3 default networks defined (ip default-network). One /24 and two /29 networks. I also have a default route for the /24 defined.<br>
<br>
When the default route is in place, only the /24 VIPs work. If I remove the default route, VIPs on all three networks work but there is a slight delay. If I reboot the si450 then none of the VIPs work. It seems the routes are cached when I remove the default route, which makes it all work but unreliably.<br>
<br>
How can I have VIPs in 3 different subnets with their own gateway?<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
foundry-nsp mailing list<br>
<a href="mailto:foundry-nsp@puck.nether.net">foundry-nsp@puck.nether.net</a><br>
<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br>
</blockquote></div><br></div>