11-19-2022 04:30 PM - last edited on 11-21-2022 12:47 AM by Translator
Hello , I am studying CCNP book and question
and I found a question as below
An engineer is creating a policy that overrides normal routing behavior. If the route to a destination of 10.100.100.0/24 is withdrawn from the routing table, the policy must direct traffic to a
next hop of 10.1 1.1.
If the route is present in the routing table, then normal forwarding must occur. Which configuration meets the requirements?
and then the answer is very confuse for me
1.access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
Route-map POLICY permit 10 match ip address 100
set ip default next-hop 10.1.1.1
I think answer is this but the book say answer is
2. access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
route map POLICY permit 10 match ip address 100
set ip next-hop recursive 10.1.1.1 !
route-map POLICY permit 20
is that right?
if 1. does not have
route-map POLICY permit 20
and other packet will be deny? (implicit “deny all” at route map 20??)
Solved! Go to Solution.
11-20-2022 03:25 AM - last edited on 11-21-2022 12:51 AM by Translator
1.access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
Route-map POLICY permit 10 match ip address 100
set ip default next-hop 10.1.1.1
for me the answer above is right the
default
keyword is important which make the PBR check the RIB before use
next-hop pf route-map
about your confuse,
ACL have permit and deny implicit and end
1- packet the match permit of ACL will use RIB (
default
keyword) and if failed then using
route-map next-hop
2-packet that match impicit deny will use by default RIB (bypass permit 10 of route-map)
11-20-2022 03:25 AM - last edited on 11-21-2022 12:51 AM by Translator
1.access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
Route-map POLICY permit 10 match ip address 100
set ip default next-hop 10.1.1.1
for me the answer above is right the
default
keyword is important which make the PBR check the RIB before use
next-hop pf route-map
about your confuse,
ACL have permit and deny implicit and end
1- packet the match permit of ACL will use RIB (
default
keyword) and if failed then using
route-map next-hop
2-packet that match impicit deny will use by default RIB (bypass permit 10 of route-map)
11-20-2022 05:02 AM
2-packet that match impicit deny will use by default RIB (bypass permit 10 of route-map)
->Oh , I see , I have a little misunderstanding before..
Thanks for your reply
I also think 1 is correct
11-20-2022 05:12 AM
You are so so welcome
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide