cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1538
Views
0
Helpful
1
Replies

PBR on ME3800x

Hello All ,

               I was trying to do this simple PBR on an ME3800 switch "15.2(2)S1" .

===================================================================

R2#sh route-map test

route-map test, permit, sequence 10

  Match clauses:

    ip address (access-lists): 10

  Set clauses:

    vrf VPN_A

  Policy routing matches: 99 packets, 9990 bytes

R2#sh ip access-lists 10

Standard IP access list 10

    10 permit 1.1.1.1 (278 matches)

R2#sh run int te0/2

Building configuration...

Current configuration : 179 bytes

!

interface TenGigabitEthernet0/2

no switchport

mtu 9216

ip vrf receive VPN_A

ip address 10.1.2.2 255.255.255.0

ip policy route-map test

ipv6 address 2001:10:1:2::2/64

end

R2#debug ip policy dynamic

Dynamic PBR debugging is on

R2#

R2#

R2#

*Sep 16 20:31:40.841: IP: s=1.1.1.1 (TenGigabitEthernet0/2), d=20.20.20.20, len 100, policy match

*Sep 16 20:31:40.841: IP: route map test, item 10, permit

*Sep 16 20:31:40.841: IP: s=1.1.1.1 (TenGigabitEthernet0/2), d=20.20.20.20, len 100, set vrf

*Sep 16 20:31:40.841: IP: set vrf tableid 2

*Sep 16 20:31:40.841: IP: s=1.1.1.1 (TenGigabitEthernet0/2), d=20.20.20.20 (Vlan24), len 100, policy routed

*Sep 16 20:31:40.841: IP: TenGigabitEthernet0/2 to Vlan24 20.2.4.4

====================================================================

As you can packetes with the source of 1.1.1.1 get matched , but the ping are fails . When I checked futher on the next hop router I have found that the packet gets normally routed and not tagged at all !!!.

============================================

*Sep 16 20:31:23.505: IP: s=1.1.1.1 (Vlan24), d=20.20.20.20, len 100, input feature, MCI Check(85), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE

*Sep 16 20:31:23.505: IP: tableid=0, s=1.1.1.1 (Vlan24), d=20.20.20.20 (GigabitE

R4#thernet0), routed via FIB

*Sep 16 20:31:23.505: IP: s=1.1.1.1 (Vlan24), d=20.20.20.20 (GigabitEthernet0), len 100, dropped due to input interface drop feature

=================================================

I have checked and found that this feautre is not supported on the ME3800x

http://www.cisco.com/en/US/docs/switches/metro/me3600x_3800x/software/release/15.2_4_S/configuration/guide/swpbr.html

Can any body confirm that PBR for VRF does not work correctly ?


1 Reply 1

Hello George,

On both platforms me3600/3800 neither VRF source selection nor PBR with "set vrf" are supported. So you are correct there is a limitation on these platforms.

Thank you

-- 
Best regards,
Dmitry Skotnikov

-- Best regards, Dmitry Skotnikov