Policy map or route-map

[teymur azimov]

Hi dears.

Core switch connect to ASA.

I configurated two subnet at core switch 3750. one of 192.168.193.0, 192.168.20.0  and second one is 10.10.1.0.

i write one ip route 0.0.0.0 0.0.0.0.0 192.168.193.222 (192.168.193.222-proxy server ip address).

and i want to 10.10.10.0 send to ASA not proxy server. ASa inside ip address 172.30.30.1 which is connected core switch.

how to send 10.10.10.0 to asa. i must be write route map but i do not know how.

please help me at this issue.

access-list  104 ip permit 10.10.10.0 0.0.0.255 any

route-map Classify permit 10

match ip address 104

set ip next-hop 172.30.30.1 ---asa inside ip.

i wrote it but it can not working.

[Alexander Maroukian]

Hi Shenin,

In principle you are right the commands should not be available if sdm routing is not selected, this is just a question to be sure. Sometimes there are strange things . We do not know if the switch is part of a stack.

Best regards,

Alex

[teymur azimov]

i can not write ip policy route-map under the interface vlan.

how can i enable this command?

[Alexander Maroukian]

As I told before :

Hi,

You must aplly "sdm prefer routing" as proposed by Alain or "sdm prefer routing-pbr" if you are going to do PBR. Have you apllied this command do you know if your switch is using SDM routing? You can check "show sdm prefer" your sdm status by this command.

Best regards,

Alex

[teymur azimov]

Yes my switch cisco catalyst 3750 and Version 12.2(53)SE2, my switches at stack.

is it different configuration sdm at stack?

[teymur azimov]

Yes my switches both of  cisco catalyst 3750(2 switches) and Version 12.2(53)SE2, my switches at stack.

is it different configuration sdm at stack?

[cadet alain]

Hi,

To enable PBR, the stack master must be running the IP services image.

Regards.

Alain.

[Alexander Maroukian]

If your master switch is using different sdm template then it may change the sdm template of the stack member.

When you apply new sdm template you will have to reload the router to apply the change.

Best regadrs,

Alex

EDIT: as Alain said ip services image is needed.

[teymur azimov]

Dear  Alexander

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

     1 30    WS-C3750X-24       12.2(53)SE2           C3750E-UNIVERSALK9-M

*    2 30    WS-C3750X-24       12.2(53)SE2           C3750E-UNIVERSALK9-M

this image is ip services image?

[cadet alain]

Hi,

Yes it is.

Alain.

[teymur azimov]

Dears.

My catalyst switches C3750E Software (C3750E-UNIVERSALK9-M), Version 12.2(53)SE2,

i wrote sdm prefer routing and reload the switches.

after the reload i can not write ip policy command.

i think so my image is ip service image.

[cadet alain]

Hi,

Have you done this on the stack master?

Can you provide sh run int vlan x from the master.

Regards.

Alain.

[teymur azimov]

yes i done this at stack master.

can i do sdm prefer routing desktop command??

[cadet alain]

Hi,

try this one:

dual-ipv4-and-ipv6 routing template

Regards.

Alain.