cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
369
Views
0
Helpful
2
Replies

3550 route-map problem

mhousley
Level 1
Level 1

Hi, i've configured route maps onto a 3550 and they do not seem to be working at all. I am running the Enhanced image, Ver c3550-i5q3l2-mz.121-22.EA4.bin.

I have also configured the SDM for: -

sdm prefer routing extended-match

I am getting no debug output and no matches against the route-map in the "sh route-map" command.

The config is shown below (IP addresses changed)

!

logging buffered 16384 debugging

!

ip routing

!

mls qos

!

class-map match-all 768k

match access-group 2

!

policy-map 768k

class 768k

police 768000 200000 exceed-action drop

!

interface FastEthernet0/5

description Client

no switchport

ip address 10.10.10.186 255.255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

no ip route-cache

no ip mroute-cache

ip policy route-map INTERNET

no cdp enable

service-policy input 768k

!

!

interface FastEthernet0/23

description ISP Connection

no switchport

ip address 50.50.50.2 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

no ip route-cache

no ip mroute-cache

no cdp enable

standby 20 ip 50.50.50.1

standby 20 priority 105

standby 20 preempt

!

!

ip classless

ip route 0.0.0.0 0.0.0.0 30.30.30.1

ip route 20.20.20.96 255.255.255.240 10.10.10.187

!

access-list 3 permit 10.10.10.184 0.0.0.7

access-list 3 permit 20.20.20.96 0.0.0.15

!

route-map INTERNET permit 10

match ip address 3

set ip next-hop 50.50.50.4

!

Any help with diagnoses as to why the route-map isn't working would be greatly appreciated !

2 Replies 2

Besides doing "debug ip policy" (to see if there is any Policy-Based Routing being performed), do also "debug ip packet 3" (to see if any packets are matching the access-list used in the route-map).

Also, get the output of the following commands:

- show arp (to see if adjacent routers are visible)

- show ip route (to see if you have valid routes for 10.10.10.10.184/29 and 20.20.20.96/28)

- show access-list 3 (to see if any packets are matching the access-list used in the route-map).

Good luck.

joyride_us
Level 1
Level 1

Hi,

are packets coming through the FA0/5 interface ? Do they come with an IP address within the ranges pecified in your ACL ?

Review Cisco Networking for a $25 gift card