static route vs. route-map

[robad]

Hello Team,

We want that all of our traffic from some vlan will go out from a specific IP

For that, we have a route-map that the next hop is : 10.10.10.1

It used to work in our CAT 6500, and all the traffic from vlan 10 got out well.

Now, on our CAT 9600, it's not working.

The traffic from this vlan is getting out only after adding this line to the router :

ip route 0.0.0.0 0.0.0.0 10.10.10.1

We are pinging from hosts in vlan 10 and traffic is going out, but no matches on the route-map, which means the traffic is going out because of the "ip route" commnd.

Of course, that when deleting the "ip route" command, the traffic is not getting out at all.

What do you think can cause that issue ? 

Is there any change between route-maps in old CAT series to newer like 9600 ?

Thanks in advance

[pman]

Hi,

So I understand you have configured ip next-hop 10.10.10.1 because of this lineד:

"For that, we have a route-map that the next hop is : 10.10.10.1"

"The traffic from this vlan is getting out only after adding this line to the router : ip route 0.0.0.0 0.0.0.0 10.10.10.1

.

.

.

What do you think can cause that issue ? "

The next-hop ip command works like this:

The set ip next-hop command verifies the existence of the next hop specified, and…

1. if the next hop exists in the routing table, then the command policy routes the packet to the next hop.
2. if the next hop does not exist in the routing table, the command uses the normal routing table to forward the pack

Example for solution :

you can add track to the static route (ip route 0.0.0.0 0.0.0.0 10.10.10.1 track 1)

and if the track (track 1) goes down for this static route then both the static route and the ip next-hop command (inside the route-map) will no longer be used

[Georg Pauwen]

Hello,

post the running config of your 9600 (or at least the part that shows the route map config)...

[thestudent]

Check the class-map as well, check if the ACL matches the traffic. Also, check if you applied the policy to the CAT6500 interface where traffic from vlan 10 ingresses.