Nexus 7010 PBR ACL Issue

[YEN-HSI Lin]

Hi All:

I have a strange problems,I set PBR in Nexus 7010 VDC,but when i show ip access-list,don't any ACL hit record!!

Nx-os version:6.2.2(a)

My Sample config:

ip access-list test
  statistics per-entry
  10 permit ip 10.1.66.12/32 10.4.6.10/32 
 

route-map test permit 10
  match ip address test 
  set ip next-hop 10.3.3.24

interface Vlan31
  no ip redirects
  ip address 10.1.6.253/24
  ip policy route-map test

-----------------------------------------------

sh IP access list test
        statistics per-entry 
        10 permit ip 10.1.66.12/32 10.4.6.10/32 

Have any suggestion??

Thanks!!!!! 

[kalg · Accepted solution]

Hi,

You would need to enable "pbr-statistics" for the route-map 'test' for which you want to see the hits.

The command to enable pbr-statistics is: 'route-map <route-map-name> pbr-statistics'

Note: This command may fail if the same interface is collecting statistics for some other policy like ACL applied to it.

This issue has been documented in the below command reference link::
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/unicast/command/reference/n7k_unicast_cmds/l3_cmds_r.html#pgfId-1542932

To display the statistics use the below command:

show route-map <route-map name> pbr-statistics

HTH,

Kala