Cisco 3750 Stack and Route-Maps

[Nick Currie]

Hi there, hoping someone can help with this one:

I have a Cisco 3750 stack with 5 members.

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

     1 24    WS-C3750G-24T      12.2(55)SE6           C3750-IPSERVICESK9-M

     2 24    WS-C3750G-24T      12.2(55)SE6           C3750-IPSERVICESK9-M

*    3 24    WS-C3750G-24T      12.2(55)SE6           C3750-IPSERVICESK9-M

     4 52    WS-C3750G-48TS     12.2(55)SE6           C3750-IPSERVICESK9-M

     5 52    WS-C3750G-48TS     12.2(55)SE6           C3750-IPSERVICESK9-M

I have recently set the sdm prefer template to routing to allow route-maps and rebooted the stack:

3750GCORE#show sdm prefer
The current template is "desktop routing" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.

  number of unicast mac addresses:                  3K
  number of IPv4 IGMP groups + multicast routes:    1K
  number of IPv4 unicast routes:                    11K
    number of directly-connected IPv4 hosts:        3K
    number of indirect IPv4 routes:                 8K
  number of IPv4 policy based routing aces:         0.5K
  number of IPv4/MAC qos aces:                      0.5K
  number of IPv4/MAC security aces:                 1K

I still cannot apply a route map to a vlan interface however:

I have preconfigured the route map as per below to take traffic from one particular client and pass it to the inside interface of our ASA firewall:

(yes i know 192.9.0.0 is a public network, its an inherited problem that is in process of being remedied!)

ip access-list extended TEST

permit ip host 192.9.216.234 any

permit icmp host 192.9.216.234 any

permit tcp host 192.9.216.234 any

route-map TEST_MAP permit 9

match ip address TEST

set ip default next-hop 192.9.201.10

When i do the following I get this error from debug:

3750GCORE#config t

Enter configuration commands, one per line.  End with CNTL/Z.

3750GCORE(config)#int vlan 216

3750GCORE(config-if)#ip policy route-map TEST_MAP

3750GCORE(config-if)#

007804: Feb  8 03:16:55: %PLATFORM_PBR-3-UNSUPPORTED_RMAP: Route-map TEST_MAP not supported for Policy-Based Routing

when I show the running config, the route-map is not there.

3750GCORE#show running-config int vlan 216
Building configuration...

Current configuration : 205 bytes
!
interface Vlan216

no ip redirects
ip directed-broadcast 101
end

Any ideas why TEST_MAP is not supported??

[Nick Currie]

Is there anyway to have a 3750 using SVI to route as opposed to ports apply a route-map with set ip default next-hop?

The reason I ask is I want to send traffic for destinations not known to our EIGRP routing table for some specific hosts to the internet via our ASA firewall, but not send ALL traffic to the internal interface of our firewall needlessly.

[ben-sharpibm]

Hi Nick,

You need to remove the 'default' from your route-map as follows:

route-map TEST_MAP permit 9

match ip address TEST

set ip next-hop 192.9.201.10

You should now be able to apply the route map.

Regards,

Ben