05-23-2005 10:29 AM - edited 03-02-2019 10:52 PM
Hi, i've configured route maps onto a 3550 and they do not seem to be working at all. I am running the Enhanced image, Ver c3550-i5q3l2-mz.121-22.EA4.bin.
I have also configured the SDM for: -
sdm prefer routing extended-match
I am getting no debug output and no matches against the route-map in the "sh route-map" command.
The config is shown below (IP addresses changed)
!
logging buffered 16384 debugging
!
ip routing
!
mls qos
!
class-map match-all 768k
match access-group 2
!
policy-map 768k
class 768k
police 768000 200000 exceed-action drop
!
interface FastEthernet0/5
description Client
no switchport
ip address 10.10.10.186 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
no ip mroute-cache
ip policy route-map INTERNET
no cdp enable
service-policy input 768k
!
!
interface FastEthernet0/23
description ISP Connection
no switchport
ip address 50.50.50.2 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
no ip mroute-cache
no cdp enable
standby 20 ip 50.50.50.1
standby 20 priority 105
standby 20 preempt
!
!
ip classless
ip route 0.0.0.0 0.0.0.0 30.30.30.1
ip route 20.20.20.96 255.255.255.240 10.10.10.187
!
access-list 3 permit 10.10.10.184 0.0.0.7
access-list 3 permit 20.20.20.96 0.0.0.15
!
route-map INTERNET permit 10
match ip address 3
set ip next-hop 50.50.50.4
!
Any help with diagnoses as to why the route-map isn't working would be greatly appreciated !
05-24-2005 09:30 AM
Besides doing "debug ip policy" (to see if there is any Policy-Based Routing being performed), do also "debug ip packet 3" (to see if any packets are matching the access-list used in the route-map).
Also, get the output of the following commands:
- show arp (to see if adjacent routers are visible)
- show ip route (to see if you have valid routes for 10.10.10.10.184/29 and 20.20.20.96/28)
- show access-list 3 (to see if any packets are matching the access-list used in the route-map).
Good luck.
05-24-2005 11:08 AM
Hi,
are packets coming through the FA0/5 interface ? Do they come with an IP address within the ranges pecified in your ACL ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide