cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
999
Views
0
Helpful
3
Replies

set ip next-hop Issue

x9858627899
Level 1
Level 1

Hello , I am studying CCNP book and question

and I found a question as below

An engineer is creating a policy that overrides normal routing behavior. If the route to a destination of 10.100.100.0/24 is withdrawn from the routing table, the policy must direct traffic to a

next hop of 10.1 1.1.

If the route is present in the routing table, then normal forwarding must occur. Which configuration meets the requirements?

and then the answer is very confuse for  me 

1.access-list 100 permit ip any 10.100.100.0 0.0.0.255 !

Route-map POLICY permit 10 match ip address 100
set ip default next-hop 10.1.1.1

I think answer is this but the book say answer is

2. access-list 100 permit ip any 10.100.100.0 0.0.0.255 !

route map POLICY permit 10 match ip address 100
set ip next-hop recursive 10.1.1.1 !

route-map POLICY permit 20

is that right?

if 1. does not have 

route-map POLICY permit 20

and other packet will be deny? (implicit “deny all” at route map 20??)

1 Accepted Solution

Accepted Solutions

1.access-list 100 permit ip any 10.100.100.0 0.0.0.255 !

Route-map POLICY permit 10 match ip address 100
set ip default next-hop 10.1.1.1



for me the answer above is right the

default

keyword is important which make the PBR check the RIB before use

next-hop pf route-map

 

about your confuse, 
ACL have permit and deny implicit and end 
1- packet the match permit of ACL will use RIB (

default 

keyword) and if failed then using

route-map next-hop


2-packet that match impicit deny will use by default RIB (bypass permit 10 of route-map)

View solution in original post

3 Replies 3

1.access-list 100 permit ip any 10.100.100.0 0.0.0.255 !

Route-map POLICY permit 10 match ip address 100
set ip default next-hop 10.1.1.1



for me the answer above is right the

default

keyword is important which make the PBR check the RIB before use

next-hop pf route-map

 

about your confuse, 
ACL have permit and deny implicit and end 
1- packet the match permit of ACL will use RIB (

default 

keyword) and if failed then using

route-map next-hop


2-packet that match impicit deny will use by default RIB (bypass permit 10 of route-map)

2-packet that match impicit deny will use by default RIB (bypass permit 10 of route-map)

->Oh , I see , I have a little misunderstanding before..

Thanks for your reply

I also think 1 is correct

You are so so welcome 

Review Cisco Networking for a $25 gift card