We have a need to use PBR and route-maps in our environment. The ACL in which we reference the route map looks like
ip access-list extended Live-PBR-1 permit ip host 172.19.0.20 18.104.22.168 22.214.171.124
we have noticed that in testing we only see half the subnets as working. Consistently the odd subnets are unavailable.
We believe our testing has shown that each classfull network needs to be described and using a wildcard mask such as this doesn't work.
Q1. Can we create an object-group on our 65K 12.2(33)SXI to use in the ACL referenced by the PBR config
Q2. Is it possible to use the range command or does each network have to be described with its mask. (we have to desc quite a large range of networks)
IP ACLs use wildcard masks a bit set to 0 means must match a bit set to 1 means don't care
so an ACL like yours:
matches only hosts with 4 byte = 254 with any octet in 2md and third position
you may want to rewrite it as :
permit ip host 172.19.0.20 126.96.36.199 x.255.255.255
x may be 31
Hope to help
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: