Metrics when redistributing a static default route into EIGRP?
I saw a network working with EIGRP and resdistributing a static default route into it. I did not find the "default metrics" to redistribute into EIGRP but the static default route works and is redistributed. My understanding was that everytime you redistribute into EIGRP you needed to specify the metrics. How come this network is working? Can someone explain or point to a cisco document what explains it?
Sample of the config:
router eigrp 1
redistribute static
no autosummary
network Y.Y.Y.Y
ip route 0.0.0.0 0.0.0.0 X.X.X.X
Thank you,
It's just one of those specific things about EIGRP and IOS, maybe a design choice. If they do use the interface as the seed metric then that would help explain why it's that way.
Weirdly if you are using EIGRP VRF address family configuration on IOS and you redistribute statics you do need a metric.
And I believe NXOS running on Nexus switches also needs a metric defined.
Just one of those things you have to remember but it would be good if it was consistent.
Jon
Similar Messages
-
How do I inject a static default route into vrf
Could anybody give me any advise on injecting a static default route into vrf.
The static route is to the internet, I can't enable vrf forwading on the fa interface as other users also use this internet connection.
I am configuring a 7206 VXR 12.3(26) and have attached a copy of the config
Any help gratefully receivedHi
I think you have to specify the route as this
ip route vrf delegate_wireless fa0/0 0.0.0.0 0.0.0.0 194.154.168.1 global
it tells the router to to use a next hop that is not part of the vrf.
Also, don't forget that the return traffic has to be routed out to the vrf.
Something like this.
ip route a.b.c.d tu1 10.252.254.2
/Mikael -
UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????
UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????
Description:
I am unable to get a static default route via MPBGP session for a vrf, any other route redistributed the same way is getting through.
Just the static default route isn't ????
1>
SOURCE PE WHERE IS THE ROUTE REDISTRIBUTED:
pe1#
router bgp 4755
bgp router-id 10.10.10.103
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 10.10.10.100 remote-as 4755
neighbor 10.10.10.100 update-source Loopback0
address-family vpnv4
neighbor 10.10.10.100 activate
neighbor 10.10.10.100 send-community extended
exit-address-family
address-family ipv4 vrf B
redistribute static <<<<<<<<<<<<<< STATIC REDIS
no auto-summary
no synchronization
exit-address-family
address-family ipv4 vrf A
redistribute static <<<<<<<<<<<<<< STATIC REDIS
no auto-summary
no synchronization
exit-address-family
ip classless
ip route vrf A 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global <<<< STATIC ROUTE POINTING THE GLOBAL CONTEXT INTERFACE
ip route vrf B 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global <<<< STATIC ROUTE POINTING THE GLOBAL CONTEXT INTERFACE
DESTINATION PE HERE I CANNOT SEE THE STATIC DEFAULT ROUTE:
pe3(config-router-af)#do sh ip bgp vpnv4 all
BGP table version is 11, local router ID is 10.10.10.103
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 4755:1 (default for vrf A)
*>i172.16.1.0/30 10.10.10.101 0 100 0 ?
*>i172.16.2.0/30 10.10.10.102 0 100 0 ?
*>i172.16.10.0/24 10.10.10.101 2297856 100 0 ?
*>i172.16.20.0/24 10.10.10.102 2297856 100 0 ?
*>i172.16.200.0/24 10.10.10.102 2170112 100 0 ?
Route Distinguisher: 4755:2 (default for vrf B)
*>i172.16.1.0/30 10.10.10.101 0 100 0 ?
*>i172.16.2.0/30 10.10.10.102 0 100 0 ?
*>i172.16.10.0/24 10.10.10.101 2297856 100 0 ?
*>i172.16.20.0/24 10.10.10.102 2297856 100 0 ?
*>i172.16.200.0/24 10.10.10.102 2170112 100 0 ?
THE STAITC ROUTE IS REDISTRIBUTED TO LOCAL VRF CONTXT ASWELL AS WE CAN SEE:
pe3(config-router-af)#do sh ip route vrf A
Routing Table: A
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.1.2 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks
B 172.16.200.0/24 [200/2170112] via 10.10.10.102, 00:00:23
B 172.16.20.0/24 [200/2297856] via 10.10.10.102, 00:00:23
B 172.16.10.0/24 [200/2297856] via 10.10.10.101, 00:00:23
B 172.16.1.0/30 [200/0] via 10.10.10.101, 00:00:23
B 172.16.2.0/30 [200/0] via 10.10.10.102, 00:00:23
S* 0.0.0.0/0 [1/0] via 192.168.1.2, Serial1/0
Hope I am clear in explaining the issue...
Thanks,
DaraHehehe :)
"Unfortunately" that's true !!!!
This could have been the last thing that I try.
Getting he techs work, protocols work is fine.
But if get to make myself understand the logic behind adding this command as well than ... :(
Thanks a lot, -
Inject BGP Default Routes into Multiple VRF before Best Path Selection
Hello,
I have the following setup:
Multiple Border Routers with eBGP sessions to external AS. We receive a default route from this multiple AS to keep the Table manageable. We noticed an important part of our traffic was been SW routed instead of CEF when we had the Full Internet table. Router Resources came to the ground when we changed to a default.
Now I want to separate this default routes into different VRF. Attached is the Diagram.
My question is, the multiple default route all go into the BGP Table. The BGP table then select the best route and place it on the RIB and then to the FIB.
I want to redistribute the different Route on the BGP table prior to the Best path selection algorithm and placed on the RIB.
How can I achieve this?Hi,
Redistribution of multiple routes to same prefix is not possible. Even if you have configured BGP multipath and all different bgp routes got installed into routing table, during redistribution only route will be redistributed.
Also would like to understand the requirement of redistributing multiple BGP routes in to IGP. As per your diagram, 3 different eBGP sessions are on three different routers, so you can prefer eBGP route over iBGP received from other routers and can distribute eBGP route to IGP from each router. Thus you will have three different default routes in to IGP in core.
Please don't forget to rate this post if it has been helpful
- Akash -
Injecting Global default Routes into a MPLS VPN
Hi,
I have a PE router running MPBGP which receives two default routes to the internet through an IPV4 BGP session. I need to import these routes in to a VRF and export them to different customer VRFs so that these VRFs are able to access Internet.
I have used the feature called "BGP Support for IP Prefix Import from Global Table into a VRF Table" (URL:http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00803b8db9.html#wp1063870)
and imported these routes into a VRF.
The issue is these routes are not propagated to any of the other PE routers which has customer VRFs configured.
Has anybody tried this or a similar method to inject a dynamic default route into a MPLS VPN.
Any suggestions would be highly appreciated.
Thanks
SubhashHi Subhash,
is there anything preventing you from terminating your internet BGP sessions in a VRF? Then everything should go smoothly, i.e. standard VRF import/export.
So possibility A) create a VRF Internet, move bgp neighbor commands there and use filters preventing anything but the default route, then use route targets to distribute the default route into other VRFs.
Possibility B) use static routing with packet leaking. Could look like this:
ip route vrf Internet 0.0.0.0 0.0.0.0 global
ip route vrf Internet 0.0.0.0 0.0.0.0 global 250
ip route Serial0/0 !assuming this is where the customer router connects.
Note: the BGP peer IP does not have to be directly connected! There has to be a LDP label for it though. so include your BGP peers network into your IGP and the backup will work, when you loose the link to the peer.
Hope this helps! Please rate all posts.
Regards, Martin -
WRV200 Unable to set static default route
In my case i should use the wrv200 as a router with static routes.
A tried to set up a route 0.0.0.0 0.0.0.0 192.168.1.254.
I did not get any error messages after clicking the "save changes" button, but it does not work and it can't be seen on the routing table.
I think that it is not a missing feature! That must be a bug!
Could anybody help me please?I can not do that because the default gateway parameter belongs to the wan interface, which is connected with the router at the vineyard over vpn and has the ip 172.16.1.1 if I try to set here 192.168.1.254 it says:
"The gateway should be in the same subnet as the interface" or something like that with the same meaning.
I did not post but i use the firmware version 1.0.39 -
Modify the preference value of the default route
Hi
How to achieve the Below ? any configuration example?
1)How to modify the preference value of the default route to be less prefered than OSPF External route
2)how to redistribute the default route as type 2 external route
3)how to redistribute the default route as type 1 external route
thanksHi Ibrahim,
See below:
1) Can you elaborate on this a bit? Can you explain, specifically, what your trying to accomplish? I don't think you can get a default route into the OSPF RIB that is not external as the default is injected as a Type-5 LSA (e1 or e2). If your talking about getting a router to use the OSPF learned default over the default router learned via some other source (e.g. static, BGP, etc), then it depends on the source because of the Administrative Distance when comparing the two defaults ( the one default learned via OSPF has AD=110, and the other default is AD=X, where X is the Administrative Distance assigned to the protocol).
2) Use the "default-information originate metric-type 2" command under "router ospf" -- Note this is the default
3) Use the "default-information originate metric-type 1" command under "router ospf" -- Note, you don't need this in Totally Stubby Area.
4) For NSSA area you have to use the "area nssa <area_num> default information-originate metric-type <type>" router subcommand. Note your NSSA should have a Type-7 LSA for the default route
Rate if helpful.
Joe -
Show ip route, Why 46.1.1.4 is chosen as default route ?
Dear All,
Can you give some idea about this: when entering command "show ip route" the output is as the following. Why 46.1.1.4 is chosen as default route instead of 36.1.1.3 ? Thank you
R6#sh ip route
Gateway of last resort is 46.1.1.4 to network 0.0.0.0
36.0.0.0/24 is subnetted, 1 subnets
C 36.1.1.0 is directly connected, FastEthernet0/1
67.0.0.0/24 is subnetted, 1 subnets
C 67.1.1.0 is directly connected, Serial0/2
78.0.0.0/24 is subnetted, 1 subnets
S 78.1.1.0 [1/0] via 67.1.1.7
46.0.0.0/24 is subnetted, 1 subnets
C 46.1.1.0 is directly connected, Serial0/0
S* 0.0.0.0/0 [1/0] via 46.1.1.4
[1/0] via 36.1.1.3
R6(config)#do sh run | s route
ip route 0.0.0.0 0.0.0.0 36.1.1.3
ip route 0.0.0.0 0.0.0.0 46.1.1.4
ip route 78.1.1.0 255.255.255.0 67.1.1.7Hello, the static default route is showing to two next hops, 46.1.1.4 and 36.1.1.3. They have the same Admin Distance and cost, if CEF is enabled it will load-share per session (src-dst IP pair)
If the router was only using one of the routes, only one would be displayed. -
Hi,
I have a very basic question I wanted to run by everyone to make sure my understanding is correct.
Setup:
Basic config, router with two interfaces and a single default route.
hostname RTR1
interface Ethernet0/0
ip address 1.1.1.1 255.255.255.0
interface Ethernet0/1
ip address 1.1.2.1 255.255.255.0
ip route 0.0.0.0 0.0.0.0 1.1.2.2
add -> ip route 0.0.0.0 0.0.0.0 10.10.10.1
If I add a default route (currently in a telnet session coming through 1.1.2.2 to get to RTR1) to a gateway that is NOT locally connected nothing will happen, correct? The router won't try to load balance my traffic since the second gateway is not directly connected and reachable, correct?
Next, if I change the IP address on e0/1 to 10.10.10.2/24 then my default route of 1.1.2.2 will no longer be used and my 10.10.10.1 defaut route will become active, correct?
I can then connect using my new IP of 10.10.10.2 assuming all routing is working on my new default gateway, correct?
Basically, I'm making sure my understanding of the default gateway route not being used unless it is accessible is valid. If it is, it will load balance traffic across up to 6 of them.
Please comment or correct if my understanding is incorrect.
Thanks.Jamie
I believe that most of your understanding is ok especially about not load sharing over the routes as defined. I checked it on a router and only the default route with a reachable next hop is inserted into the routing table. Both static default routes are in the config but only one is in the routing table.
HTH
Rick -
Hi,
I have a question concerning EIGRP routing on a L3 switch behind a HSRP HA pair of routers which connect to a WAN.
HSRP is operating as should be and when R1 fails, or an interface thereon, R2 becomes the active. All good.
However there are now two default routes in the route table on the L3 switch. One is routing traffic to the R2 real IP which is expected but also there is the old default route to R1's real IP.
Using EEM we can overcome this but is there another simpler method to prevent this occurring?
Thanks
FF
If i understand correcty your LAN interfaces on the routers ie. the ones connecting to the L3 switch are running HSRP and you are also running EIGRP between the L3 switch and the routers.
If so you wouldn't usually have both solutions in use ie. you either -
1) use HSRP and point the default route on the L3 switch to the HSRP VIP
or
2) use EIGRP between the routers and the L3 switch. If a router or interface fails it should stop advertising the default route to the L3 switch.
However that sounds like it is not happening which suggests the default routes are not coming from the WAN.
So where are the default routes in EIGRP on the L3 switch coming from ?
Jon -
Redistributing Floating Static route
Hi All,
I have a question.when we redistribute a static route with AD as 210 into MP-iBGP to carry the route to other PE's ,will it also carry the AD value for this route ?
Help would be really appreciated.
Thanks
Regards
Anantha Subramanian NatarajanHello Anantha,
AD is locally significant and is never propagated to another node by any protocol including BGP.
the other PE will see a route in VRF of type iBGP so it will see something like
B [200/0]
the BGP AS path will have an origin ? meaning the prefix is the result of a redistribution on originator PE and not by the usage of network command.
Hope to help
Giuseppe -
BGP Session drops when loading routes into a VRF
I've configured a small MPLS network with 4 P routers (ASR 1002s) 4 PE routers (6509s) and two Cisco 7206s as route reflectors. I'm using OSPF as the routing protocol on the PE-CE interfaces and have sham links configured between PE routers. I currently have two VRFs configured on this network, one is working fine, and there are approximately 150 routes in this VRF.
The second vrf is configured, it also has ospf sham links configured, neighbors up, etc.
The problem I have is that when I bring up the first PE-CE link and load about 7000 routes into the second vrf my BGP sessions between the other PEs and route-reflectors start timing out. I do show the vpnv4 routes show up in the route-reflectors "sh ip bgp vpnv4 rd 14017:2" I believe the debug outputs below indicate the issue is in the route-reflectors, but was curious if anyone else had seen this issue. The BGP peering IP address for one of the route-reflectors is 10.2.0.7 and one of the session dropping PEs is 10.2.0.13.
Normal output from "unloaded" debug ip bgp vpnv4 unicast keepalives:
Route-reflector output:
May 16 09:35:31 2329: May 16 09:35:30.718 CDT: BGP: ses global 10.2.0.13 (0xA0519C0:1) Keep alive timer fired.
May 16 09:35:31 2330: May 16 09:35:30.718 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
May 16 09:35:31 2331: May 16 09:35:30.718 CDT: BGP: ses global 10.2.0.13 (0xA0519C0:1) service keepalive IO request.
May 16 09:35:31 2332: May 16 09:35:30.718 CDT: BGP: 10.2.0.13 KEEPALIVE write request serviced in BGP_IO
PE output:
May 16 09:35:38.421 CDT: BGP: 10.2.0.7 KEEPALIVE requested (bgp_keepalive_timer_expired)
May 16 09:35:38.421 CDT: BGP: 10.2.0.7 KEEPALIVE sent
Route-reflector output:
May 16 09:35:39 2341: May 16 09:35:38.427 CDT: BGP: 10.2.0.13 received KEEPALIVE, length (excl. header) 0
Same output but during a "loaded" condition:
Route-reflector output:
May 15 20:41:31 774: May 15 20:41:31.015 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) Keep alive timer fired.
May 15 20:41:31 775: May 15 20:41:31.015 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
May 15 20:41:31 778: May 15 20:41:31.015 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) service keepalive IO request.
May 15 20:42:29 793: May 15 20:42:28.363 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) Keep alive timer fired.
May 15 20:42:29 794: May 15 20:42:28.363 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
May 15 20:43:23 805: May 15 20:43:22.638 CDT: BGP: ses global 10.2.0.13 (0xA091324:1) Keep alive timer fired.
May 15 20:43:23 806: May 15 20:43:22.638 CDT: BGP: 10.2.0.13 KEEPALIVE requested (bgp_keepalive_timer_expired)
May 15 20:43:33 813: May 15 20:43:33.934 CDT: %BGP-3-NOTIFICATION: received from neighbor 10.2.0.13 4/0 (hold time expired) 0 bytes
PE output:
May 15 20:43:33.927 CDT: %BGP-3-NOTIFICATION: sent to neighbor 10.2.0.7 4/0 (hold time expired) 0 bytes
May 15 20:43:33.927 CDT: %BGP-5-ADJCHANGE: neighbor 10.2.0.7 Down BGP Notification sent
Route-reflector output:
May 15 20:43:34 814: May 15 20:43:33.934 CDT: %BGP-5-ADJCHANGE: neighbor 10.2.0.13 Down BGP Notification received
It appears to me that we are missing "BGP: 10.2.0.13 KEEPALIVE write request serviced in BGP_IO"
For full disclosure there are other BGP keep-alive events going on to the other PEs at this time, some passing, some failing.
route-reflector info:
route-reflector1#sh inv
NAME: "Chassis", DESCR: "Cisco 7206VXR, 6-slot chassis"
PID: CISCO7206VXR , VID: , SN: 37050753
NAME: "NPE-G2 0", DESCR: "Cisco 7200 Series Network Processing Engine NPE-G2"
PID: NPE-G2 , VID: V03 , SN: JAF1410AADM
NAME: "disk2", DESCR: "256MB Compact Flash Disk for NPE-G2"
PID: MEM-NPE-G2-FLD256 , VID: , SN:
NAME: "Power Supply 1", DESCR: "Cisco 7200 AC Power Supply"
PID: PWR-7200-AC , VID: , SN:
NAME: "Power Supply 2", DESCR: "Cisco 7200 AC Power Supply"
PID: PWR-7200-AC , VID: , SN:
route-reflector1#sh ver
Cisco IOS Software, 7200 Software (C7200P-ADVIPSERVICESK9-M), Version 15.1(4)M5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Tue 04-Sep-12 19:41 by prod_rel_team
ROM: System Bootstrap, Version 12.4(12.2r)T, RELEASE SOFTWARE (fc1)
BOOTLDR: Cisco IOS Software, 7200 Software (C7200P-BOOT-M), Version 15.1(4)M5, RELEASE SOFTWARE (fc1)
route-reflector1 uptime is 15 weeks, 20 hours, 43 minutes
System returned to ROM by reload at 11:03:48 UTC Thu Jan 31 2013
System restarted at 12:37:52 CST Thu Jan 31 2013
System image file is "disk2:c7200p-advipservicesk9-mz.151-4.M5.bin"
Any thoughts on this problem would be greatly appreciated.Hi again,
did you check this?
http://www.cisco.com/en/US/tech/tk365/technologies_configuration_example09186a008010a28a.shtml
I honestly do not remember the defaults in Cisco but I had a very similar issue working with Juniper because of this value was set @ about 4500 prefixes at once.
Take care
Alessio
Sent from Cisco Technical Support iPad App -
How can I set up lightroom 5, so that it becomes my main / default editing program & that when I insert my sd card into the mac lightroom starts instead of iPhoto .
Thanks. Im new to apple, which preference?
Sent from my iPhone -
Can anyone check this for me, nat overload, static and default routes, dhcp
VA has DHCP on fa0/0 and will have last good address for the gateway and will reserve 20 IP's for admin devices.
VA fa0/1 will be using static IP addressing and will be using the last good address as the default gateway address.
Serial links will use the 50.75.120.0/30 network on all serials.
Default route set to main via VAs next hop.
VA will be using NAT overload to Main via local interface.
VA
Fa0/0= 172.16.81.254
Fa0/1=172.16.82.126
S0/0/0=50.75.120.130
Main s0/0/1= 50.75.120.129 with a clock rate of 128kbps
Building configuration...
Current configuration : 1376 bytes
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname VA
enable secret 5 $1$mERr$3nisV1NYMTmTN5PhTMBC2/
enable password insurance
ip dhcp excluded-address 172.16.81.235 172.16.81.254
ip dhcp pool VA-dhcp
network 172.16.80.0 255.255.254.0
default-router 172.16.81.254
spanning-tree mode pvst
interface FastEthernet0/0
ip address 172.16.81.254 255.255.254.0
ip nat inside
duplex auto
speed auto
interface FastEthernet0/1
ip address 172.16.82.126 255.255.255.128
ip nat inside
duplex auto
speed auto
interface Serial0/0/0
ip address 50.75.100.130 255.255.255.252
ip nat outside
interface Serial0/0/1
no ip address
shutdown
interface Vlan1
no ip address
shutdown
ip nat inside source list 1 interface Serial0/0/0 overload
ip nat inside source list 2 interface Serial0/0/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/1
ip route 50.74.100.128 255.255.255.252 50.74.100.130
access-list 1 permit 172.16.0.0 0.0.255.255
access-list 2 permit 172.16.0.0 0.0.255.255
banner motd ^C
Restricted access to all unauthorized users, proceed at your will. Unauthorized users will be prosecuted to the extend of the law. ^C
line con 0
password shots
login
line aux 0
line vty 0 4
password xrays
login
end
VA(config)#
A network beginner, thank you in advance :))
Sent from Cisco Technical Support iPhone AppReyna,
I can see a couple of issues
Your static routes:-
ip route 0.0.0.0 0.0.0.0 Serial0/0/1
ip route 50.74.100.128 255.255.255.252 50.74.100.130
Ser 0/0/1 is shut and has no ip addressing.
The route to 50.74.100.128 has no way to reach the next hop 50.74.100.130
Your NAT translations are both the same therfore only one is effective.
Just tidy up a little:-
The only static route you need is a default route:-
ip route 0.0.0.0 0.0.0.0 50.75.100.129
The NAT only requires one list and trans pointing out the outside interface
ip nat inside source list 1 interface Serial0/0/1 overload
access-list 1 permit 172.16.0.0 0.0.255.255
Regards,
Alex.
Please rate useful posts. -
Introduce second default gateway into policy-based routing and optimization
Questions:
1) How to get the second PBR_DEFAULT_GATEWAY address 10.20.20.3 into the policy-based routing for redundancy?
2) Any optimizations as more and more traffic (policy-based routed and otherwise) goes through interface Gi1/0/1?
Address range A.B.0.0/16 represents assigned Internet-routable addresses.
Network also uses 10.0.0.0/8, 172.16.0.0/20, 192.168.0.0/16.
DEFAULT_GATEWAY router participates in OSPF and injects the default routes 0.0.0.0/0 10.10.10.1 and 0.0.0.0/0 10.20.20.1 into OSPF.
PBR_DEFAULT_GATEWAY router participates in OSPF but filters out default routes injected by DEFAULT_GATEWAY router.
ROUTER_A participates in OSPF and receives default routes injected by DEFAULT_GATEWAY router.
ROUTER_A contains the attached policy-routing configuration that allows the subnet A.B.30.0/24 to route anywhere on the network and uses PBR_DEFAULT_GATEWAY as the way out.Ok I will see if I can run out to work and try this today..
After thinking about this, If I need to get to local ip addresses (192.168.1.0 and 192.168.128.0), I might have to change my route map to include those ranges in an ACL, then assign the 172.20.200.1 as the gateway to get to those networks, with the last statement being the traffic to be sent out the firewall
for instance
# Access to one of my local networks
access-list 101 permit ip 172.20.200.0 0.0.0.255 192.168.1.0 0.0.0.255
# Send Internet traffic to ASA/PIX
access-list 172 permit ip 172.20.200.0 0.0.0.255 any
route-map pix-172-20-200 permit 10
match ip address 101
set ip next-hop 172.20.200.1
route-map pix-172-20-200 permit 20
match ip address 172
set ip next-hop 172.20.200.2
and so on?
I know I need to be in front of my switch to test the change from set ip default next-hop to set ip next-hop...
I wantto make sure I can still get to the local networks I need to get to.
I appreciate all your help, and I will test this later on today..
Thanks
Don Hickey
Maybe you are looking for
-
[Solved] Small issue with .Xresources/.Xdefaults
So I originally made a lot of URxvt settings, first in .Xdefaults and later converted to .Xresources. Then I decided to do what I wanted to do using command line parameters instead, so obviously I removed the settings again from .Xresources and didn'
-
I have a JSP wherein the user enters time input in a field in hh:mm format.That goes to the backend database where time is stored as " datetime" , validates it and sends back the response.So if the user enters 09:99, response comes back as 10:39. Wha
-
Itunes is not letting me buy a song! It keeps telling me that payment onfo. is required but a couple days ago i just redeemed a $25 itunes card and still have $1.33 left in credit and the song only costs $1.29! Whats the deal!!!???>:/
-
HT201209 how do i buy music with my exsiting balance
i just redeemed $100 itunes gift card then i tried to buy music but its trying to use my credit card to purchase the music how do i use my exsisting balnce in my itunes account?
-
I'm trying to share a folder between users on a single mac. I want both users to be able to read and write so the folder stays current on both accounts. I put the folder in "shared," set permissions on folder so other user can read and write, enabl