PBR on 7600 not implemented in H/W !! ?

[Sherif Atef Ahmed Ismail]

Dear all

Would like your assistance plz in verifying why below simple PBR is not implemented in H/W knowing the Copp is not configured

NPE-1#sh ver | i image

System image file is "bootdisk:c7600rsp72043-advipservices-mz.122-33.SRE0a"

NPE-1#sh run int GigabitEthernet1/1

interface GigabitEthernet1/1

ip address 11.0.0.1 255.255.255.0

ip pim sparse-mode

ip policy route-map test  <<-----

ip ospf network point-to-point

load-interval 30

carrier-delay msec 0

mpls ip

mpls traffic-eng tunnels

ip rsvp bandwidth

NPE-1#

NPE-1#sh route-map test

route-map test, permit, sequence 10

  Match clauses:

    ip address (access-lists): 1

  Set clauses:

    ip next-hop 15.0.0.34

  Policy routing matches: 0 packets, 0 bytes

route-map test, permit, sequence 20

  Match clauses:

  Set clauses:

    ip precedence flash

  Policy routing matches: 0 packets, 0 bytes

NPE-1#

NPE-1#sh tcam interface GigabitEthernet1/1 acl in ip

* Global Defaults shared

Entries from Bank 0

Entries from Bank 1

    permit      ip any 224.0.0.0 15.255.255.255

    punt        ip any any   <<<<<--------------------------

NPE-1#

NPE-1#sh policy-map control-plane

NPE-1#

Mayn Thanks

Sherif Ismail

[Reza Sharifi]

Hi Sherif,

When deploying PBR on the 7600, not all actions are hardware based:

The Policy Feature Card (PFC) and any Distributed  Feature Cards (DFCs) provide hardware support for policy-based routing  (PBR) for route-map sequences that use the

match ip address

,

set ip next-hop

, and

ip default next-hop

PBR keywords.

have a look at this link for more info:

http://www.cisco.com/en/US/docs/routers/7600/ios/12.2SR/configuration/guide/layer3.html#wp1027016

HTH

[Sherif Atef Ahmed Ismail]

Thanks Reza for your reply

The problem that I am using options that should be implemented in H/W as "match ip address" & "set ip next-hop"

Waiting for your feedback .. thx

[Reza Sharifi]

Sherif,

Not sure about this, but if I am reading the output correctly, only ip any any is being punted to CPU and not your set and match clauses.

Reza

[Sherif Atef Ahmed Ismail]

Hi Reza

Actually reason for this is due to route-map sequence 20 which mark all traffic with precedence flash

when route-map was configured only with sequence 10, o/p was as below (as I remember)

Entries from Bank 1

    permit      ip any 224.0.0.0 15.255.255.255

    punt        ip 11.0.0.40 any     

    permit      ip any any

NPE-1#

I know a provider who did a swap from 7600 routers to another vendor due to this issue ... he was configuring several PBRs and this caused high CPU utilization due to router S/W processing

BR,
Sherif Ismail