02-08-2017 12:19 AM
I configured route map with next hop to specific vlan but after I configured it this vlan can't reach the other vlans, but I need this vlan to reach one host in another vlan.
this is my configuration that I did.
interface Vlan120
description wifi-ipad
ip address 10.2.120.1 255.255.255.0
ip access-group IPAD_ACL in
ip helper-address 10.2.3.10
ip policy route-map IPAD-MAP
end
route-map IPAD-MAP, permit, sequence 10
Match clauses:
ip address (access-lists): IPAD_ACL
Set clauses:
ip next-hop 10.2.10.200
Policy routing matches: 131 packets, 45012 bytes
Extended IP access list IPAD_ACL
10 permit ip 10.2.120.0 0.0.0.255 host 10.2.3.3 (2 matches)
20 deny ip 10.2.120.0 0.0.0.255 10.2.3.0 0.0.0.255 (9 matches)
30 permit ip any any (26 matches)
I need vlan 120 reach host 10.2.3.3 in vlan 3 only and deny any
02-08-2017 03:10 AM
Remove "ip access-group IPAD_ACL in" under the interface and then try again.
02-17-2017 09:21 PM
good morning rikshit4aggarwal
I removed ip access-group but the problem still
I found that the problem was the route-map action was drop. so when I permit ip 10.2.120.0 0.0.0.255 host 10.2.3.3 it drop
so the solution was I changed it to deny ip 10.2.120.0 0.0.0.255 host 10.2.3.3 and it's ok
thanks for your reply
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide