Route-map continue, in CRS RPL
Dear all,
what is the replacement for continue command in route-map for CRS IOS XR RPL ?
is it ? pass command ??
actually i had some issue matching almost 15 community attribute ingress from customer network...
and i think, is it can be done with pass command ?
like :
if community (a:a) then
action
pass
else if community (b:b) then
action
pass
end if
so, when the route contain community a:a, will get action assigned, and not yet to be forwarded, instead, will continue to run the next if, to check if the route also contain b:b community...
so with this i dont have to create almost 2^15 combination if format on RPL.
is it do able ? or is there any command that work simillar with "continue" command in route-map, if match, the route still get processed until the end of policy.
Thanks a lot,
Budi L
Hello Budi
Yes, the pass statement allows a policy to continue executing even though the route has not been modified. When a policy has finished executing, any route that has been modified in the policy or any route that has received a pass disposition in the policy, successfully passes the policy and completes the execution. Note, a policy does not modify route attribute values until all tests have been completed. In other words, comparison operators always run on the initial data in the route. Intermediate modifications of the route attributes do not have a cascading effect on the evaluation of the policy.
Here is the PASS example:
route-policy ak-community
if community matches-any (11:11, 44:44) then
set community (55:55) additive
pass
endif
if community matches-any (22:22) then
set community (77:77) additive
endif
end-policy
If a route contains a community 11:11 then we add 55:55 and continue. So If the same route contain 22:22 as well, we’d add another community 77:77 to the same route. Note, if we have an action (like SET here), a PASS statement is not needed and we continue with the policy.
Example 2. Here we can see nested IF. So if a route contains 11:11 then we add 55:55 and verify it further if the route has 22:22 and if so, add 77:77
route-policy ak-community
if community matches-any (11:11, 44:44) then
set community (55:55) additive
if community matches-any (22:22) then
set community (77:77) additive
endif
endif
end-policy
Example 3. In this example we add 55:55 to routes matching 11:11 or 44:44. Otherwise, if a route has 22:22, we add 77:77. Note, if a route has 11:11 AND 22:22 (or 44:44 AND 22:22) we’d add 55:55 only.
route-policy ak-community
if community matches-any (11:11, 44:44) then
set community (55:55) additive
elseif community matches-any (22:22) then
set community (77:77) additive
endif
end-policy
IF statement are flexible too. You noted we used MATCHES-ANY in the IF statement. We can use a list of different conations in one IF. For example:
If community matches-every (11:11, 22:22) or destination in (11.1.3.0/24) then
set local-preference 500
Regards,
/A
Similar Messages
-
/*! flamingo 6.4.0 2013-06-18 */
function AppListView(){this.allBooks=[],this.recentBooks=[],this.$dom=$("<div>",{"class" :"app-list"}),this._loadBooks(),this._createView(),setTimeout($.proxy(this._prel oadIcons,this),1e3)}function Beacon(e,a){location.protocol.match(/^http/)&&e.enable_tracking&&e.product&&e.p latform&&e.version&&(this.title=e.title.toLowerCase(),this.product=e.product.toL owerCase(),this.platform=e.platform.toLowerCase(),this.version=e.version.toLower Case(),this.locale=a.isoCodes[0],this.loaded=$.getScript(App.resourcePath+"sc.js ",$.proxy(this.init,this)),$(e).on("navigate",$.proxy(this.navigate,this)),$(e). on("search",$.proxy(this.search,this)),$(e).on("searchresults",$.proxy(this.sear chResultSelected,this)),$(e).on("feedback",$.proxy(this.feedback,this)),$(e).on( "mediastart",$.proxy(this.mediaStart,this)))}function Book(e){if($.extend(this,e),this.name=this.title,$.each(this.topics,$.proxy(fun ction(e,a){this.topics[e]=new Topic(e,a,this)},this)),$.each(this.sections,$.proxy(function(e,a){this.section s[e]=new Section(e,a,this)},this)),$.each(this.toc,$.proxy(function(e,a){this.toc[e]=thi s.topics[a]||this.sections[a]||a},this)),$.each(this.sections,$.proxy(function(e ,a){var t=a.children;$.each(t,$.proxy(function(e,i){t[e]=this.topics[i]||this.sections[ i]||i,t[e].parent=a},this))},this)),this.landing=this.topics[this.landing]||"",t his.copyright=this.topics[this.copyright]||"",!this.landing){for(var a=this.toc[0];a instanceof Section;)a=a.children[0];this.landing=a}this.unknown_topic=new Topic("unknown",{name:"TOPIC_UNAVAILABLE".loc(),href:""},this)}function ContentView(e,a){this.name=e,this.$dom=$("<div>",{id:e,"class":"contentView"}). addClass(e),this.topic=null,a&&this.showTopic(a)}function DebugPanel(e){this.$dom=$("<dl>",{"class":"debug-info"}),$("<dt>",{text:"flamin go"}).appendTo(this.$dom),$("<dd>",{text:e.version}).appendTo(this.$dom),$.each( ["build_id","title","design","enable_tracking","product","platform","version","l ocale","collect_feedback","framework","source_schema"],$.proxy(function(a,t){$(" <dt>",{text:t}).appendTo(this.$dom),$("<dd>",{text:e.book[t]||"[ undefined ]"}).toggleClass("undefined",!e.book[t]).appendTo(this.$dom)},this))}function Design(e){this.name=e||"default";var a=Design.namedSkins[this.name];this.cssClass="",this.isLayeredStyle=!1,this.hel pviewerWindowSize={height:520,width:815},this.dismissSearchLabel="Cancel",this.p reloadList=["lightbox-close.png","[email protected]","lightbox-close-hover.p ng","[email protected]","disclosure-open.png","[email protected]" ],a&&(a.preloadList&&(this.preloadList.concat(a.preloadList),delete a.preloadList),$.extend(this,a))}function HelpViewerBook(e){this.id=e.bookID(),this.title=e.title(),this.link="help:openb ook='"+this.id+"'",this.iconHref=("x-help-icon://"+encodeURIComponent(this.id)). replace(/\.help$/,""),this.apple=this.id.match(/^com\.apple\./)?!0:!1}function LandingView(e,a){this.book=e,this.bundle=a,this.contentView=new ContentView("landing",e.landing),this.$dom=this.contentView.$dom,this.isHelpCen ter="HelpViewer"in window&&!HelpViewer.currentScope(),this.isHelpCenter?this._addMarquee():this._l ayoutLanding()}function LightboxView(e){this._$previous_focus=$(),this.visible=!1,this.$dom=$("<div>",{ id:e,"class":e,"aria-hidden":"true",role:"alertdialog",tabindex:"-1"}).hide(),$( "<div>",{"class":"background"}).appendTo(this.$dom);var a=$("<div>",{id:"lightboxOuterWrapper"}).appendTo(this.$dom),t=$("<div>",{id:"l ightboxInnerWrapper"}).appendTo(a),i=$("<div>",{id:"lightboxContentWrapper"}).ap pendTo(t);this.contentView=new ContentView("lightbox-content"),i.append(this.contentView.$dom);var n=$("<img>",{src:App.resourcePath+"images/[email protected]",alt:"Close".lo c(),role:"button"});$("<a>",{"class":"closeButton"}).append(n).appendTo(a).click ($.proxy(function(){App.navigation.popPrevious(),this.hide()},this)).hover(funct ion(){n.attr("src",App.resourcePath+"images/[email protected]")},funct ion(){n.attr("src",App.resourcePath+"images/[email protected]")})}function NavController(e){this._book=e,this._linearTOC=[],this._currentItem=null,this._p ushedItem=null,this._addItems(e.toc),App.design.isLayeredStyle||this._linearTOC. unshift(e.landing),this._checkHash();var a=$.proxy(this._checkHash,this);"onhashchange"in window?$(window).bind("hashchange",a):setTimeout(function(){setInterval(a,100)} ,500)}function Section(e,a,t){this.id=e,this.book=t,$.extend(this,a)}function TOC(e,a,t){this.book=e,this._contentPath=t,this._$liByID={},this.$dom=this._$ul ForNavList(this.book.toc,0).addClass("toc");var i=$("<li>",{role:"treeitem","class":"home"}).prependTo(this.$dom),n=$("<a>",{hr ef:"#"+this.book.landing.id}).appendTo(i);$("<img>",{src:a+"images/tangerine/hom [email protected]"}).appendTo(n),$("<span>",{"class":"name",text:"Home".loc()}).appendTo( n),this._$liByID[e.landing.id]=i,this.$dom.on("click","a",$.proxy(this._toggleSe ctions,this))}function Topic(e,a,t){this.id=e,this.book=t,this.categories=[],$.extend(this,a),this.ful l_name=this.name,this._content_loaded=!1,this.$content=$("<div>",{id:e}),this.is _landing=$.inArray("landing",this.categories)>-1,this.is_glossary=$.inArray("glo ssary",this.categories)>-1,this.is_external=!!this.href.match(/^\w+:/),this.is_h ash=!!this.href.match(/^#/)}function TermMatch(e,a,t){this.term=e,this.topic=App.book.topicForID(a),this.weight=t}fu nction WeightedTopic(e){this.topic=e.topic,this.weight=e.weight}function SearchResult(e,a,t){this.query=e,this.matchingTerms=a,this.topics=[];var i={};$.each(t,function(e,a){var t=a.topic.id,n=i[t];n?n.addMatch(a):i[t]=new WeightedTopic(a)});var n=$.map(i,function(e){return e}),o=n.sort(function(e,a){return a.weight-e.weight});this.topics=$.map(o,function(e){return e.topic})}function SearchIndex(e){this._keywordStemRegex="",this._matchesByTerm={};var a,t,i,n,o=[];i=function(e,t){return new TermMatch(a,t,e)},n=function(e,a,t){return"\\b"+a+(t?t.replace(/(.)/g,"$1?"):"" )+"\\b"};for(var s in e)a=s,t=e[a],this._matchesByTerm[a]=$.map(t,i),a=a.replace(/(\.|\*|\+|\?|\{|\}| \||\[|\]|\(|\)|\-|\^|\$)/g,"\\$1"),a=a.replace(/^(..)(.+)$/,n),o.push(a);o.sort( function(e,a){return a.length-e.length}),this._keywordStemRegex=RegExp(o.join("|"),"gi")}window.App= {version:"6.4.0",env:"production"},location.search.match(/%23/)&&location.replac e(location.href.replace("%23","#")),$.ajaxSetup({crossDomain:!1}),window.APD={}, $.extend(window.App,{book:null,bundle:null,design:null,navigation:null,searchInd ex:null,resourcePath:"",queryParams:{},views:{}}),String.prototype.loc=function( ){return App.bundle?App.bundle.translate(this):this},function(){if("console"in window||(window.console={},$.each(["assert","count","debug","dir","dirxml","err or","group","groupCollapsed","groupEnd","info","log","markTimeline","profile","p rofileEnd","time","timeEnd","trace","warn"],function(){window.console[this]=$.no op})),location.search&&$.each(location.search.substring(1).split("&"),function() {var e=this.split("=");App.queryParams[decodeURIComponent(e[0])]=decodeURIComponent( e[1])}),App.queryParams.topic){var e=App.queryParams.topic,a=location.pathname;return delete App.queryParams.topic,a+=$.param(App.queryParams)?"?"+$.param(App.queryParams): "",a+="#"+e,location.replace(a),void 0}App.queryParams.localePath&&App.queryParams.localePath.match(/^http/)&&delete App.queryParams.localePath,navigator.userAgent.match(/Help Viewer/)&&($.browser.helpviewer=!0),$(document).ready(function(){function e(){clearTimeout(i),t.hide().remove()}function a(){e(),console.error("Could not load navigation.json file."),$("html").addClass("nocontent")}$("#javascriptDisabled").remove(),App.r esourcePath=$("script[src$='flamingo.js']").attr("src").replace(/flamingo\.js$/, ""),(new Image).src=App.resourcePath+"images/[email protected]";var t=$("<div>",{id:"updating"}).hide().appendTo("body").append($("<img>",{src:App. resourcePath+"images/[email protected]"})),i=setTimeout(function(){t.show()},500);A pp._loadBundle().pipe(function(){return $.getJSON(App.bundle.URL()+"navigation.json",function(e,a,t){App._addServerType (t),App.book=new Book(e),App.beacon=new Beacon(App.book,App.bundle.current)})}).fail(a).then(e).then(App.init).then(App .showInterface).then(function(){return $.getJSON(App.bundle.URL()+"search.json",function(e){App.searchIndex=new SearchIndex(e)})}).fail(function(){console.error("Could not load search.json file.")})}),App._loadBundle=function(){var e=$.Deferred(),a=App.queryParams.localePath||App.queryParams.lang||window.local ePath;return App.bundle=new APD.Bundle("",a,function(){$("body").attr("dir",this.current["text-direction"]) ,$("<div>",{"class":"localizedUpdateText",text:"Loading latest help...".loc()}).appendTo("#updating"),$("html").attr("lang",this.current.isoCo des[0]),e.resolve()}),e},App._addServerType=function(e){var a=e.getResponseHeader("x-server-type");"development"!==this.env&&a&&a.match(/re view|staging/)&&(this.env=a),$("html").addClass(this.env)},App.setTitle=function (e){var a=App.book.title,t=e&&(e.full_name||e.name);t!==a&&(a+=": "+$("<textarea>",{html:t}).text()),document.title=a},App.init=function(){var e=$("html");if($.each($.browser,function(a){"version"!==a&&e.addClass(a)}),e.ha sClass("nocontent")||$("#contentUnavailable").remove(),window.devicePixelRatio>1 &&void 0!==document.body.style.backgroundSize&&e.addClass("bgsize"),App.design=new Design(App.book.design),$.browser.helpviewer&&Design.helpviewerWindowSize){var a=Design.helpviewerWindowSize,t=Math.max(a.width,top.outerWidth),i=Math.max(a.h eight,top.outerHeight);top.resizeTo(t,i)}if(navigator.userAgent.match(/(iphone|i pad)/i)){"-webkit-overflow-scrolling"in document.body.style||e.addClass("nooverflow");var n=720;App.design.helpviewerWindowSize&&(n=App.design.helpviewerWindowSize.width ),$("<meta>",{name:"viewport",content:"maximum-scale=3.0,width="+n}).prependTo(" head")}},App.showInterface=function(){App.createViews(),App.design.preloadImages (),App.navigation=new NavController(App.book)},App.createViews=function(){var e=$("body"),a=$("<div>",{id:"container","class":"container"}),t=$("<div>",{id:" menu","class":"menu"}).appendTo(a),i=$("<div>",{id:"front-matter","class":"front -matter"}).appendTo(a),n=$("<div>",{id:"navigation","class":"navigation",role:"n avigation"}).appendTo(i);App.views.landing=new LandingView(App.book,App.bundle),App.views.toc=new TOC(App.book,App.resourcePath,App.bundle.URL()),App.views.topic=new ContentView("topic"),App.views.debug=new DebugPanel(App),App.views.lightbox=new LightboxView("lightbox"),$.browser.helpviewer&&!HelpViewer.currentScope()&&(App .views.appList=new AppListView),a.add(App.views.lightbox.$dom).addClass(App.design.name).addClass( App.design.cssClass),e.prepend(a),e.append(App.views.debug.$dom),i.prepend(App.v iews.landing.$dom),a.append(App.views.topic.$dom.hide()),searchController.addInt erfaceElements(n),n.append(App.views.toc.$dom),e.append(App.views.lightbox.$dom) ,App.views.appList&&e.append(App.views.appList.$dom),$("<h1>",{"class":"book-tit le"}).append($("<a>",{href:"#",text:App.book.title})).appendTo(t),$(App.book).on ("navigate",$.proxy(App.views.toc.updateSelection,App.views.toc)),$(App.book).on ("navigate",$.proxy(App.toggleViews,App)),$("body").on("orientationchange",App.r esetOverflow)},App.resetOverflow=function(){var e,a=App.views,t=$(".toc").add(a.landing.$dom).add(a.topic.$dom);t.css("overflow ","visible"),e=t.css("overflow"),t.css("overflow","")},App.toggleViews=function( e,a,t){var i=$(".front-matter"),n=i.find("#landing");App.setTitle(a),t===App.views.appList ?(App.views.topic.hide(),i.hide(),App.views.appList.show()):(App.views.appList&& App.views.appList.hide(),i.show()),t===App.views.landing&&App.views.topic.hide() ,App.design.isLayeredStyle?t===App.views.landing||t===App.views.toc?(i.attr({"ar ia-hidden":!1,tabindex:-1}).show().focus(),App.views.topic.hide()):t===App.views .topic&&i.attr({"aria-hidden":!0,tabindex:-1}).hide():t===App.views.landing||t== =App.views.toc?n.show():t===App.views.topic&&n.hide(),$("#container").attr("aria -hidden",t===App.views.lightbox),t!==App.views.lightbox&&App.views.lightbox.hide ();var o="HelpViewer"in window&&"currentScope"in HelpViewer,s="HelpViewer"in window&&"setBreadcrumbBookTitleWithAnchor"in HelpViewer;o&&s&&"com.apple.machelp"===HelpViewer.currentScope()&&HelpViewer.se tBreadcrumbBookTitleWithAnchor("",null),$("body").prop("scrollTop",0),$("html"). is(".nooverflow")&&window.scrollTo(0,1)},$(document).on("keydown",function(e){!( e.ctrlKey||e.metaKey||e.shiftKey||App.views.lightbox.visible)&&"querySelectorAll "in document&&(37===e.which?App.navigation.previous():39===e.which&&App.navigation. next())}),$(document).on("keypress",function(e){e.ctrlKey&&e.metaKey&&2===e.keyC ode&&App.views.debug.$dom.toggle()}),$("#localizations select").live("change",function(){delete App.queryParams.localePath,App.queryParams.lang=$(this).val(),location.href="?" +$.param(App.queryParams)})}(),AppListView.prototype.show=function(){this.$dom.s how()},AppListView.prototype.hide=function(){this.$dom.hide()},AppListView.proto type._loadBooks=function(){var e=this;"HelpViewer"in window&&HelpViewer.availableBooks&&HelpViewer.recentApplicationList&&($.each(He lpViewer.availableBooks(),function(a,t){e.allBooks.push(new HelpViewerBook(t))}),$.each(HelpViewer.recentApplicationList(),function(a,t){va r i=RegExp(t,"i");$.each(e.allBooks,function(a,t){t.id.match(i)&&e.recentBooks.pu sh(t)})}))},AppListView.prototype._createView=function(){var e=5,a="Show all".loc(),t="Show less".loc(),i=function(){var e=$(this).parents(".app-group"),i=e.hasClass("closed")?t:a;e.toggleClass("close d").find(".showHide").text(i)};if(this.allBooks.length){var n,o,s;n=$("<div>",{"class":"app-group closed"}).appendTo(this.$dom),$("<div>",{"class":"title"}).appendTo(n),$("<a>", {"class":"showHide",text:a,click:i}).appendTo(n),$("<div>",{"class":"clear"}).ap pendTo(n),$("<div>",{"class":"initial-set"}).appendTo(n),$("<div>",{"class":"add itional-set"}).appendTo(n),o=n.clone(!0,!0).appendTo(this.$dom),s=n.clone(!0,!0) .appendTo(this.$dom),$(".title",n).text("Recent applications".loc()),$(".title",o).text("Apple applications".loc()),$(".title",s).text("Other applications".loc()),$.each(this.recentBooks,function(a,t){e>a&&t.$iconLink().a ppendTo(n)}),$.each(this.allBooks,function(a,t){if("com.apple.HelpCenter.help"!= =t.id&&"com.apple.machelp"!==t.id){var i=t.apple?o:s,n=2*e>i.children(".initial-set").children().length?i.children(".i nitial-set"):i.children(".additional-set");t.$iconLink().appendTo(n)}}),$([n,o,s ]).each(function(){if(0===$(".additional-set",this).children().length&&$(".showH ide",this).remove(),0===$(".book",this).length)return $(this).remove(),void 0;for(var a=$(".book:last",this),t=a.parent();0!==t.find(".book").length%e;)$("<a>",{"cla ss":"book"}).appendTo(t)})}},AppListView.prototype._preloadIcons=function(){var e=this;setTimeout(function(){$.each(e.allBooks,function(e,a){setTimeout(functio n(){a.preloadIcon()},20*e)})},1e3)},function(e){var a={events:"",channel:"",pageName:"",eVar1:null,eVar16:null,eVar17:null,eVar18:n ull,eVar20:null,eVar21:null,eVar28:null};e.init=function(){this.setAccount(),thi s.setConstants()},e.setAccount=function(){var e="aaplpdglobaldev";"production"===App.env&&(e="aaplpdglobal"),this.sc=s_gi(e), this.sc.server=this.title,this.sc.trackDownloadLinks=!1,this.sc.trackExternalLin ks=!1,this.sc.trackInlineStats=!1,this.sc.useForcedLinkTracking=!1,this.sc.linkD ownloadFileTypes="exe,zip,wav,mp3,mov,mpg,avi,wmv,pdf,doc,docx,xls,xlsx,ppt,pptx ",this.sc.linkInternalFilters="help.apple.com",this.sc.linkLeaveQueryString=!1,t his.sc.linkTrackVars="eVar1,prop1,eVar2,prop2,eVar3,prop3,eVar4,prop4,eVar5,prop 5,eVar6,prop6,eVar7,prop7,eVar8,prop8,eVar9,prop9,eVar10,prop10,eVar11,prop11,eV ar12,prop12,eVar13,prop13,eVar14,prop14,eVar16,prop16,eVar17,prop17,eVar28,prop2 8,events",this.sc.linkTrackEvents="event1,event2,event3,event4",this.sc.usePlugi ns=!1,this.sc.doPlugins=$.noop,this.sc.visitorNamespace="appleproductdocumentati on",this.sc.trackingServer="metrics.apple.com",this.sc.trackingServerSecure="sec uremetrics.apple.com"},e.setConstants=function(){var e="unknown",a="unknown",t="unknown",i="help:"+this.product,n=i+":"+this.platfor m,o=n+":"+this.version;$.each(["helpviewer","safari","webkit","opera","mozilla", "msie"],function(){return this in $.browser?(e=this,!1):void 0}),$.each([/Mac OS X ([_\.\d]+)/,/iPhone OS ([_\.\d]+)/,/CPU OS ([_\.\d]+)/,/Windows NT ([_\.\d]+)/],function(){var e=navigator.userAgent.match(this);return e?(a=e[0].replace(this,"$1").replace(/_/g,"."),!1):void 0}),$.each([/Version\/([_\.\d]+)/,/Chrome\/([_\.\d]+)/,/MSIE ([_\.\d]+)/,/Firefox\/([_\.\d]+)/],function(){var e=navigator.userAgent.match(this);return e?(t=e[0].replace(this,"$1").replace(/_/g,"."),!1):void 0}),$.extend(this.sc,{eVar2:navigator.userAgent,eVar3:e+":"+t,eVar4:a,eVar5:e+" :"+a,eVar6:App.version,eVar7:i,eVar8:n,eVar9:o,eVar10:this.product,eVar11:this.p latform,eVar12:this.version,eVar13:(navigator.browserLanguage||navigator.systemL anguage||navigator.userLanguage||navigator.language).substr(0,2),eVar14:this.loc ale,eVar15:navigator.language})},e._track=function(e,t){this.loaded.then($.proxy (function(){$.extend(this.sc,a,t),this._resetProps(),this.sc.t(!0,"o",e)},this)) },e._resetProps=function(){var e,a,t={};for(e in this.sc)e.match(/prop\d+/)&&(this.sc[e]=null),e.match(/eVar\d+/)&&this.sc[e]&&( a=e.replace(/eVar(\d+)/,"$1"),t["prop"+a]="D=v"+a);$.extend(this.sc,t)},e.naviga te=function(e,a){var t=this.title+":"+a.name.toLowerCase();this._track("view",{events:"event1",chann el:t,pageName:t,eVar1:(a.is_glossary?"glossary:":"")+a.name,eVar28:a.id})},e.sea rch=function(e,a,t){if(a){var i=this.title+":search",n=t.length?"search":"search: no results";this._track(n,{events:t.length?"event2":"event3",channel:i,pageName:i, eVar1:n,eVar16:a})}},e.searchResultSelected=function(e,a,t){var i=this.title+":search",n="search: result click-through";this._track("name",{events:"event4",channel:i,pageName:i,eVar1:n ,eVar16:a,eVar17:t.name,eVar18:t.id})},e.feedback=function(e,a){var t=this.title+":"+a.name.toLowerCase();this._track("feedback",{events:"event5",c hannel:t,pageName:t,eVar1:a.name,eVar21:"false",eVar28:a.id})},e.mediaStart=func tion(e,a){var t=this.title+":media",i=App.navigation._currentItem;this._track("media: start",{events:"event7",channel:t,pageName:t,eVar1:i.name,eVar18:a,eVar20:"vide o",eVar28:i.id})}}(Beacon.prototype),Book.prototype.topicForID=function(e){retur n e?this.topics[e]:this.landing},Book.prototype.topicForURL=function(e){var a;return $.each(this.topics,function(){return this.href===e?(a=this,!1):void 0}),a},Book.prototype.sectionForID=function(e){return this.sections[e]},Book.prototype.itemForID=function(e){var a=this.topicForID(e)||this.sectionForID(e);return(!a||a instanceof String)&&(a=this.unknown_topic),a},function(){function e(e){return e?e.match(/[^\/]$/)?e+="/":e:""}function a(){var e=[navigator.browserLanguage||navigator.systemLanguage||navigator.userLanguage| |navigator.language];if("HelpViewer"in window&&"preferredLanguages"in HelpViewer)try{e=HelpViewer.preferredLanguages().concat(e)}catch(a){}if("iTunes "in window)try{e=$.map(iTunes.acceptedLanguages.split(","),function(e){return e.replace(/\+?([^;]+);.*/,"$1")}).concat(e)}catch(a){}return e=$.map(e,function(e){return e?(e=e.toLowerCase(),2>=e.length?e:[e,e.substr(0,2)]):null})}function t(e){return i||(i={},$.each(APD.translations,function(e,a){$.each(a.meta.isoCodes,function( e,t){i[t]=a})})),i[e]}var i,n={name:"English",isoName:"English",isoCodes:["en"],folder:"en.lproj","text-d irection":"ltr"};APD.Bundle=function(a,t,i){this.path=e(a),this.current=$.extend ({},n),t&&t.match(/^.*\.lproj$/)&&(this.current.folder=t),this.locales=[],this._ uiStrings={};var o=this;this._loadList().done(function(){var e=o._lookupLocale(t)||o._browserLocale();e&&(o.current=e)}).always(function(){o ._loadStrings()}).always(function(){i&&i.call&&i.call(o,o)})};var o=APD.Bundle.prototype;o._loadList=function(){var e=this,a=$.Deferred();return $.getJSON(this.path+"locale-list.json").done(function(t){e.locales=t,a.resolve( )}).fail(function(){return console.warn("Unable to load language list, loading content from "+e.current.folder),$.getJSON(e.URL()+"locale-info.json").done(function(t){t.me ta.folder=e.current.folder,e.locales.push(t.meta),a.resolve()}).fail(function(){ a.reject()})}),a},o._loadStrings=function(){var e=this,a=e.current.isoCodes;a.push("en"),$.each(a,function(a,i){var n=t(i);return n?(e._uiStrings=n.ui||{},e.cssClass=n.meta.cssClass||"",!1):void 0})},o._lookupLocale=function(e){if(!e)return null;var a=null;return $.each(this.locales,function(t,i){var n=i.isoCodes.concat([i.folder,i.name,i.isoName]);return $.inArray(e,n)>-1?(a=i,!1):void 0}),a},o._browserLocale=function(){var e=null,t=this.locales;return $.each(a(),function(a,i){return $.each(t,function(a,t){return $.inArray(i,t.isoCodes)>-1?(e=t,!1):void 0}),e?!1:void 0}),e},o.list=function(){if(2>this.locales.length)return[];if("iTunes"in window)return[];if("HelpViewer"in window)return[];var e=$.map(this.locales,function(e){return{name:e.name,isoCode:e.isoCodes[0]}});re turn e.sort(function(e,a){return e.name.localeCompare(a.name)}),e},o.translate=function(e){return this._uiStrings[e]||e},o.URL=function(){return this.path+e(this.current.folder)}}(),ContentView.prototype.showTopic=function(e ){e!==this.topic&&(this.topic=e,this.$dom.empty().prop("scrollTop",0).append(e.l oadContent()),"HelpViewer"in window&&"mtContentAccessed"in HelpViewer&&HelpViewer.mtContentAccessed(e.id+" "+e.name,e.book.title)),this.$dom.attr("aria-hidden",!1).show().trigger("conten tLoaded")},ContentView.prototype.hide=function(){this.$dom.attr("aria-hidden",!0 ).hide()},function(){$(".contentView a[href*='.html']").live("click",function(e){var a=$(this).attr("href"),t=a.match(/#/)?a.replace(/^.*\.html(#?.*)/,"$1"):"",i=a. replace(/^(.*\.html)#?.*/,"$1"),n=App.book.topicForURL(i)||App.book.topicForID(t );a.match(/^http/)||a.match(/\//)||(e.preventDefault(),n&&n.navigateTo())}),$(". contentView .Task h2, .contentView .task h2, .showTaskBody, .hideTaskBody").live("click",function(){var e=$(this).parent(".Task, .task").filter(":first"),a=e.toggleClass("closed").hasClass("closed");e.find("[ aria-expanded]").attr("aria-expanded",!a),e.find("[aria-hidden]").attr("aria-hid den",a)}),$(".contentView .LinkAppleWebMovie a, .contentView .movie a").live("click",function(e){if(!("HelpViewer"in window&&HelpViewer.availableBooks)){e.preventDefault();var a=$(this).attr("href");movieLightboxController.showLightboxWithURL(a)}})}(),Des ign.prototype.preloadImages=function(){$.each(this.preloadList,function(e,a){(ne w Image).src=App.resourcePath+"images/"+a})},Design.namedSkins={magenta:{helpview erWindowSize:null,cssClass:"layered",isLayeredStyle:!0},red:{helpviewerWindowSiz e:null,cssClass:"layered",isLayeredStyle:!0},tangerine:{dismissSearchLabel:"Clos e",preloadList:["tangerine/[email protected]","tangerine/disclosure-open.pn g","tangerine/[email protected]","tangerine/home.png","tangerine/[email protected] g","tangerine/menu-background.png"]}},HelpViewerBook.prototype.preloadIcon=funct ion(){(new Image).src=this.iconHref},HelpViewerBook.prototype.$iconLink=function(){return $("<a>",{href:this.link,"class":"book"}).append($("<img>",{src:this.iconHref})) .append($("<div>",{text:this.title}))},function(){var e=LandingView.prototype;e.showTopic=function(e){this.contentView.showTopic(e)}, e._layoutLanding=function(){if(!App.design.isLayeredStyle){var e=this.$dom.wrapInner("<div class='row' />").wrapInner("<div class='center' />").find(".center"),a=$("<div class='row' />").appendTo(e);$.browser.helpviewer||a.append(this._$languageMenu()),$("<div> ",{"class":"copyrightTagline",text:this.book.copyright_text}).appendTo(a)}},e._a ddMarquee=function(e){var a=$(".marquee",e),t=$("img",a).remove().attr("src"),i=$(".title",a).remove().te xt(),n="url("+t+") 0 0 no-repeat, -webkit-gradient(linear, 0 0, 0 100%, from(#ebebeb), to(#fff))";a.length&&e.addClass("hasMarquee"),$("<p>",{text:i}).appendTo(a),$(" <p>",{"class":"spacer"}).prependTo(a).clone().appendTo(a),a.css("background",n)} ,e._$languageMenu=function(){var e=this.bundle.list();if(0!==e.length){var a=$("<div>",{id:"localizations"}),t=$("<select>").appendTo(a);return $("<option>",{text:"Change Language".loc()}).appendTo(t),$.each(e,function(e,a){$("<option>",{val:a.isoCod e,text:a.name}).appendTo(t)}),a}}}(),LightboxView.prototype.showTopic=function(e ){this._$previous_focus=$(":focus"),this.visible=!0,this.contentView.showTopic(e ),this.$dom.show().attr("aria-hidden","false").attr("tabindex","0"),(!$.browser. msie||$.browser.version>=8)&&this.$dom.focus()},LightboxView.prototype.hide=func tion(){(!$.browser.msie||$.browser.version>=8)&&(this.$dom.blur(),this._$previou s_focus.focus()),this.$dom.hide().attr("aria-hidden","true").attr("tabindex","-1 "),this._$previous_focus$previous_focus=$(),this.visible=!1},function(){var e=NavController.prototype,a="showHelpViewerApplicationList";e._addItems=functio n(e){var a=this;$.each(e,function(e,t){t instanceof Section&&(App.design.isLayeredStyle&&!t.parent&&a._linearTOC.push(t),a._addItem s(t.children)),t instanceof Topic&&a._linearTOC.push(t)})},e.hash=function(){return location.hash.replace(/[^\-_a-z0-9]/gi,"")},e._checkHash=function(){this._goToI D(this.hash())},e._goToID=function(e){if(!this._currentItem||this._currentItem.i d!==e){searchController.navigateToItemWithID(e);var t,i=App.book.itemForID(e);i||(i=this._book.landing),e===a?t=App.views.appList:i instanceof Section?t=App.views.toc:i instanceof Topic&&(1>=App.book.toc.length&&App.book.toc[0]instanceof Topic&&i.is_landing?t=App.views.topic:i.is_landing?t=App.views.landing:i.is_glo ssary?(this._pushedItem=this._currentItem,t=App.views.lightbox):t=App.views.topi c,t.showTopic(i)),this._currentItem=i,$(this._book).trigger("navigate",[i,t])}}, e._goToItem=function(e){location.hash=e.id},e._goToPageOffset=function(e){for(va r a=0,t=0;this._linearTOC.length>t;t++)if(this._currentItem===this._linearTOC[t]) {a=t;break}a+=e,0>a?a=this._linearTOC.length+a:a>=this._linearTOC.length&&(a-=th is._linearTOC.length),this._goToItem(this._linearTOC[a])},e.previous=function(){ this._goToPageOffset(-1)},e.next=function(){this._goToPageOffset(1)},e.popPrevio us=function(){this._pushedItem?(this._goToItem(this._pushedItem),this._pushedIte m=null):this._goToItem(this._book.landing)}}(),Section.prototype.navPath=functio n(){return(this.parent?this.parent.navPath():[]).concat(this)},Section.prototype .linkHref=function(){return"#"+this.id},function(){var e=TOC.prototype;e._$ulForNavList=function(e,a){var t=$("<ul>",{role:a?"group":"tree"}).append($.map(e,$.proxy(function(e){return this._$liForNavItem(e,a)},this)));return t},e._$liForNavItem=function(e,a){if("string"==typeof e)return console.log("Unresolved TOC item:",e),void 0;var t=$("<li>",{role:"treeitem"}),i=$("<a>",{href:e.linkHref()}).appendTo(t);return this._$liByID[e.id]=t,t.add(i).data("item",e),e.categories&&t.addClass(e.catego ries.join(" ")),e.icon&&$("<img>",{src:this._contentPath+e.icon,alt:""}).prependTo(i),$("<s pan>",{"class":"name",html:e.name}).appendTo(i),e instanceof Section&&(t.addClass("closed hasChildren").attr("aria-expanded","false"),this._$ulForNavList(e.children,a+1) .appendTo(t)),t},e.updateSelection=function(e,a){this.$dom.find("li").removeClas s("selected").attr("aria-selected",!1);var t=this._$liByID[a.id],i=this.$dom.children("li"),n=!1;if(App.design.isLayeredSt yle&&(n=!0,t&&a.id!==this.book.landing.id||!this.book.toc.length||(a=this.book.t oc[0],t=this._$liByID[a.id]),a instanceof Section&&(i.addClass("closed").attr("aria-expanded",!1),i.is(t)))){var o=t.children("ul:first").height();o&&(this.$dom.css("overflow","hidden"),this.$ dom.css("min-height",o),this.$dom.css("overflow",null))}t&&t.addClass("selected" ).attr("aria-selected",!0).parents("li").add(n?t:null).removeClass("closed").att r("aria-expanded",!0)},e._toggleSections=function(e){var a=$(e.currentTarget).parents("li:first"),t=a.data("item"),i=a.hasClass("closed" );t instanceof Section&&(App.design.isLayeredStyle?a.removeClass("closed").attr("aria-expanded ",!0):(a.toggleClass("closed",!i).attr("aria-expanded",i),e.preventDefault())),t instanceof Topic&&"HelpViewer"in window&&"mtStatisticsIncrement"in HelpViewer&&HelpViewer.mtStatisticsIncrement(0,0,1,0)}}(),function(){var e=Topic.prototype,a=!1;flamingoQTDetect=!1,function(){return navigator.userAgent.match(/applewebkit/i)?(a=!0,void 0):"execScript"in window?(execScript('on error resume next: flamingoQTDetect = IsObject(CreateObject("QuickTimeCheckObject.QuickTimeCheck.1"))',"VBScript"),a= flamingoQTDetect,void 0):($.each($.makeArray(navigator.plugins),function(){return this.name.match(/quicktime/i)?(a=!0,!1):void 0}),void 0)}(),e.navPath=function(){return(this.parent?this.parent.navPath():[]).concat( this)},e.breadcrumbHTML=function(){var e=this.navPath(),a="rtl"===$("body").attr("dir")?"◀":"►",t=" <span class='breadcrumbArrow'>"+a+"</span> ";return e.pop(),$.map(e,function(e){return e.name}).join(t)},e.linkHref=function(){return this.is_external||this.is_hash?this.href:"#"+this.id},e.navigateTo=function(){l ocation.href=this.linkHref()},e.loadContent=function(){if(!this._content_loaded) {var e=App.bundle.URL(),a=this,t="";a.href&&$.ajax({async:!1,url:e+a.href,dataType:" html"}).done(function(a){t=a.replace(/.*<body/,"<div").replace(/\/body>.*/,"/div >"),t=t.replace(/src="/g,'src="'+e)}),t?(this.$content=$(t).addClass("apd-topic" ),this.$content.find("a[href^='http']").attr("target","_blank"),this.full_name=t his.$content.find("h1:first").text(),this.$content.attr("data-apdid",this.id).re moveAttr("id").find("a[name="+this.id+"]").remove(),this._removeSectionLinks(),t his._collapseTasks(),this._formatMovieLinks(),this._addFeedbackLink(),this._addC opyrightText(),this._content_loaded=!0):(this.$content=this._contentUnavailable( ),this._content_loaded=!1)}return this.$content},e._removeSectionLinks=function(){var e=this;this.$content.find("a:not([href^=http])").each(function(){var a,t=$(this),i=t.attr("href")||"";i.match(/^(\w+).html$/)&&(a=e.book.topicForURL (i),a||t.contents().unwrap())})},e._collapseTasks=function(){var e=this.$content.find(".Task, .task"),a=1===e.length;e.each(function(){$(this).addClass(a?"":"closed").find(" [aria-expanded]").attr("aria-expanded",a).end().find("[aria-hidden]").attr("aria -hidden",!a).end()}),$("<span>",{"class":"hideTaskBody",role:"button",text:"Hide ".loc(),"aria-label":"Hide".loc()}).prependTo(e),$("<span>",{"class":"showTaskBo dy",role:"button",text:"Show".loc(),"aria-label":"Show".loc()}).prependTo(e)},e. _addFeedbackLink=function(){if(this.book.collect_feedback){var e=$("<div>",{"class":"Feedback"}).appendTo(this.$content),a=$.param({bookID:thi s.book.title,topicTitle:this.name,appVersion:this.book.version||"",build:this.bo ok.build_id||"",source:$.browser.helpviewer?"helpviewer":"browser"});$("<span>", {"class":"LinkFeedback",text:"Was this page helpful?".loc()}).appendTo(e),$("<a>",{text:"Send feedback.".loc(),href:"http://help.apple.com/feedbackR1/English/pgs/fdbck_form.php?"+a,target:"_blank"}).click($.proxy(function(){$(this.book).trigger("feedback", this)},this)).appendTo(e)}},e._formatMovieLinks=function(){var e=this;this.$content.find(".LinkAppleWebMovie, .movie").each(function(){var t=$(this),i=t.find("a:first"),n=i.attr("href"),o=i.text(),s=e._getMovieURLFromU RLParam(n);a&&s?(i.parent().is("p")||i.wrap("<p class='p'>"),$("<a>",{title:o}).prependTo(t),t.find("a").attr({href:s,target:"h v_overlay_small"})):t.remove()})},e._getMovieURLFromURLParam=function(e){var a=null;if(e.match(/.*\?movie=/)){e=e.replace(/.*\?movie=/,"");var t=App.bundle.URL()+"movies/"+e+".json";a=this._getMovieURLFromJSONFileAtURL(t)} return a},e._getMovieURLFromJSONFileAtURL=function(e){var a=null;return $.browser.msie&&navigator.userAgent.match(/x64/i)?a:(navigator.onLine&&$.ajax({ async:!1,dataType:"json",url:e,success:function(e){a=e.length?e[0].url:e.url},er ror:function(){console.log(e+" could not be loaded")}}),a)},e._addCopyrightText=function(){if(this.book.copyright_text){var e=$("<div>",{"class":"copyrightTagline",html:this.book.copyright_text}),a=this. $content.find(".contentCell:last");
a.length?a.append(e):this.$content.append(e)}},e._contentUnavailable=function(){ var e=$("<div>",{id:this.id,"class":"apd-topic"});if($("<img>",{"class":"topicIcon" ,src:App.resourcePath+"images/[email protected]"}).appendTo(e),$("<h1>",{text:"TOPIC _UNAVAILABLE".loc()}).appendTo(e),$.browser.helpviewer&&location.protocol.match( /file/)){var a=$("<div>",{"class":"body conbody"}).appendTo(e);a.append($.map("CONNECT_TO_INTERNET".loc().split("\n"),f unction(e){return $("<p>",{"class":"p",text:e})})),"mtStatisticsIncrement"in HelpViewer&&HelpViewer.mtStatisticsIncrement(1,0,0,0)}return e}}(),APD.translations=[{meta:{isoCodes:["ar"],isoName:"Arabic",name:"Ø§Ù„Ø¹Ø±Ø ¨ÙŠØ©"},ui:{TOPIC_UNAVAILABLE:"الموضوع المØدد غير متوفر Øاليًا.",CONNECT_TO_INTERNET:'تأكد من الاتصال بالإنترنت. للØصول على مساعدة، اختر قائمة Apple > تفضيلات النظام، وانقر على الشبكة، ثم انقر على "ساعدني".\nإذا كنت متصلاً بالإنترنت، ولا يظهر المØتوى بعد، فØاول مرة أخرى لاØقًا.',"%@ Search Results":"%@ نتيجة (نتائج) بØØ«","Apple applications":"تطبيقات Apple",Cancel:"إلغاء","Change Language":"تغيير اللغة",Close:"إغلاق","Featured application help":"تعليمات تطبيقات مميّزة","Go to the homepage":"الانتقال إلى الصفØØ© الرئيسية","Help for:":"تعليمات لـ:",Hide:"إخفاء",Home:"الشاشة الرئيسية","Loading latest help...":"يتم الآن تØميل Ø£Øدث التعليمات…","Other applications":"تطبيقات أخرى","Recent applications":"Ø£Øدث التطبيقات",Search:"بØØ«","Send feedback.":"أرسل تغذية مرتدّة.","Show all":"إظهار الكل","Show less":"إظهار أقل","Show the previous page":"إظهار الصفØØ© السابقة","Show the next page":"إظهار الصفØØ© التالية",Show:"إظهار","Was this page helpful?":"هل كانت هذه الصفØØ© مفيدة؟"}},{meta:{isoCodes:["ca"],isoName:"Catalan",name:"Català "},ui:{TOPIC_UNAVAILABLE:"El tema seleccionat no està disponible ara",CONNECT_TO_INTERNET:"Comproveu que teniu connexió a Internet. Per obtenir ajuda sobre com establir connexió, seleccioneu el menú Apple > Preferències del Sistema i feu clic a Xarxa i, després, a Assistent.\nSi esteu connectat a Internet però el contingut no apareix, proveu-ho de nou més endavant.","%@ Search Results":"%@ resultats","Apple applications":"Aplicacions d'Apple",Cancel:"Cancel·lar","Change Language":"Canviar idioma",Close:"Tancar","Featured application help":"Ajuda de l'aplicació destacada","Go to the homepage":"Vés a la pà gina inicial","Help for:":"Ajuda de:",Hide:"Ocultar",Home:"Inici","Loading latest help...":"Carregant l'ajuda més actualitzada…","Other applications":"Altres aplicacions","Recent applications":"Aplicacions recents",Search:"Buscar","Send feedback.":"Enviar opinió.","Show all":"Mostrar-ho tot","Show less":"Mostrar menys","Show the previous page":"Mostra la pà gina anterior","Show the next page":"Mostra la pà gina següent",Show:"Mostrar","Was this page helpful?":"Us ha resultat útil aquesta pà gina?"}},{meta:{isoCodes:["cs"],isoName:"Czech",name:"ÄŒeÅ¡tina"},ui:{TOPIC_UNA VAILABLE:"Vybrané téma nenà k dispozici",CONNECT_TO_INTERNET:"UjistÄ›te se, že jste pÅ™ipojeni k Internetu. Chcete-li nápovÄ›du pro pÅ™ipojenÃ, použijte pÅ™Ãkaz PÅ™edvolby systému z nabÃdky Apple, kliknÄ›te na SÃÅ¥ a poté na „Průvodce“.\nJste-li pÅ™ipojeni k Internetu, avÅ¡ak obsah se pÅ™esto nezobrazuje, zkuste to znovu pozdÄ›ji.","%@ Search Results":"Výsledky hledánÃ: %@","Apple applications":"Aplikace Apple",Cancel:"ZruÅ¡it","Change Language":"ZmÄ›nit jazyk",Close:"ZavÅ™Ãt","Featured application help":"NápovÄ›da pro doporučené aplikace","Go to the homepage":"OtevÅ™Ãt domovskou stránku","Help for:":"NápovÄ›da pro:",Hide:"Skrýt",Home:"Plocha","Loading latest help...":"NačÃtánà nejnovÄ›jÅ¡Ã nápovÄ›dy…","Other applications":"Jiné aplikace","Recent applications":"Poslednà aplikace",Search:"Hledat","Send feedback.":"SdÄ›lte nám svůj názor.","Show all":"Zobrazit vÅ¡e","Show less":"Zobrazit ménÄ›","Show the previous page":"Zobrazit pÅ™edchozà stránku","Show the next page":"Zobrazit dalÅ¡Ã stránku",Show:"Zobrazit","Was this page helpful?":"Pomohla vám tato stránka?"}},{meta:{isoCodes:["da"],isoName:"Danish",name:"Dansk"},ui:{TOPIC_UN AVAILABLE:"Det valgte emne er utilgængeligt",CONNECT_TO_INTERNET:"Sørg for, at der er oprettet forbindelse til internettet. Vælg Apple > Systemindstillinger, klik pÃ¥ Netværk, og klik derefter pÃ¥ “Hjælp mig” for at fÃ¥ hjælp med at oprette forbindelse.\nHvis der er forbindelse til internettet, og indholdet stadig ikke vises, kan du prøve igen senere.","%@ Search Results":"%@ søgeresultater","Apple applications":"Apple-programmer",Cancel:"Annuller","Change Language":"Skift sprog",Close:"Luk","Featured application help":"Viste program","Go to the homepage":"GÃ¥ til hjemmesiden","Help for:":"Hjælp til:",Hide:"Skjul",Home:"Hjem","Loading latest help...":"Indlæser den nyeste hjælp…","Other applications":"Andre programmer","Recent applications":"Seneste programmer",Search:"Søg","Send feedback.":"Send feedback.","Show all":"Vis alle","Show less":"Vis færre","Show the previous page":"Vis forrige side","Show the next page":"Vis næste side",Show:"Vis","Was this page helpful?":"Var denne side nyttig?"}},{meta:{isoCodes:["de"],isoName:"German",name:"Deutsch"},ui:{TOPIC_UN AVAILABLE:"Das gewählte Thema ist derzeit nicht verfügbar",CONNECT_TO_INTERNET:"Vergewissern Sie sich, dass eine Verbindung zum Internet besteht. Wählen Sie „Apple“ > „Systemeinstellungen“, klicken Sie auf „Netzwerk“ und dann auf „Assistent“, wenn Sie Hilfe benötigen.\nWenn Sie mit dem Internet verbunden sind, den Inhalt aber dennoch nicht sehen können, versuchen Sie es zu einem späteren Zeitpunkt erneut.","%@ Search Results":"%@ Suchergebnisse","Apple applications":"Apple-Programme",Cancel:"Abbrechen","Change Language":"Sprache wechseln",Close:"Schließen","Featured application help":"Empfohlenes Programm-Hilfe","Go to the homepage":"Zur Homepage","Help for:":"Hilfe für:",Hide:"Ausblenden",Home:"Startseite","Loading latest help...":"Die neuste Hilfe wird geladen ...","Other applications":"Andere Programme","Recent applications":"Benutzte Programme",Search:"Suchen","Send feedback.":"Feedback senden.","Show all":"Alle einblenden","Show less":"Weniger einblenden","Show the previous page":"Nächste Seite einblenden","Show the next page":"Vorherige Seite einblenden",Show:"Einblenden","Was this page helpful?":"War diese Seite nützlich?"}},{meta:{isoCodes:["el"],isoName:"Greek",name:"Ελληνικά"},u i:{TOPIC_UNAVAILABLE:"Αυτήν τη στιγμή, το επιλεγμÎνο θÎμα δεν είναι διαθÎσιμο",CONNECT_TO_INTERNET:"Βεβαιωθείτε ότι είστε συνδεδεμÎνοι στο Διαδίκτυο. Για βοήθεια με τη σύνδεση, επιλÎξτε το μενού Apple > «Προτιμήσεις συστήματος», κάντε κλικ στο «Δίκτυο» και μετά στο «ΘÎλω βοήθεια».\nΕάν συνδεθείτε στο Διαδίκτυο και το περιεχόμενο δεν εμφανίζεται ακόμη, δοκιμάστε ξανά αργότερα.","%@ Search Results":"%@ αποτελÎσματα αναζήτησης","Apple applications":"ΕφαρμογÎÏ‚ Apple",Cancel:"Ακύρωση","Change Language":"Αλλαγή γλώσσας",Close:"Κλείσιμο","Featured application help":"Βοήθεια προτεινόμενων εφαρμογών","Go to the homepage":"Μετάβαση στην αρχική σελίδα","Help for:":"Βοήθεια για:",Hide:"Απόκρυψη",Home:"Αφετηρία","Loading latest help...":"Γίνεται φόρτωση της πιο πρόσφατης Βοήθειας…","Other applications":"Άλλες εφαρμογÎÏ‚","Recent applications":"Πρόσφατη εφαρμογή",Search:"Αναζήτηση","Send feedback.":"Στείλετε σχόλια.","Show all":"Εμφάνιση όλων","Show less":"Εμφάνιση λιγότερων","Show the previous page":"Εμφάνιση της προηγούμενης σελίδας","Show the next page":"Εμφάνιση της επόμενης σελίδας",Show:"Εμφάνιση","Was this page helpful?":"Ήταν χρήσιμη αυτή η σελίδα;"}},{meta:{isoCodes:["en-us","en-gb","en-ca","en-ie","en"],isoName :"English",name:"English"},ui:{TOPIC_UNAVAILABLE:"The selected topic is currently unavailable",CONNECT_TO_INTERNET:"Make sure you’re connected to the Internet. For help connecting, choose Apple menu > System Preferences, click Network, and click “Assist me.”\nIf you’re connected to the Internet, and the content still doesn’t appear, try again later.","%@ Search Results":"%@ Search Results","Apple applications":"Apple applications",Cancel:"Cancel","Change Language":"Change Language",Close:"Close","Featured application help":"Featured application help","Go to the homepage":"Go to the homepage","Help for:":"Help for:",Hide:"Hide",Home:"Home","Loading latest help...":"Loading latest help...","Other applications":"Other applications","Recent applications":"Recent applications",Search:"Search","Send feedback.":"Send feedback.","Show all":"Show all","Show less":"Show less","Show the previous page":"Show the previous page","Show the next page":"Show the next page",Show:"Show","Was this page helpful?":"Was this page helpful?"}},{meta:{isoCodes:["es"],isoName:"Spanish",name:"Español"},ui:{TOPIC _UNAVAILABLE:"El tema seleccionado no está disponible en estos momentos",CONNECT_TO_INTERNET:"Asegúrese de que está conectado a Internet. Si necesita ayuda para conectarse, seleccione menú Apple > Preferencias del Sistema, haga clic en Red y, a continuación, haga clic en Asistente.\nSi ya está conectado a Internet pero no se muestra el contenido del tema, inténtelo de nuevo más tarde.","%@ Search Results":"%@ resultados","Apple applications":"Aplicaciones de Apple",Cancel:"Cancelar","Change Language":"Cambiar idioma",Close:"Cerrar","Featured application help":"Ayuda de la aplicación destacada","Go to the homepage":"Ir a la página de inicio","Help for:":"Ayuda de:",Hide:"Ocultar",Home:"Inicio","Loading latest help...":"Cargando la ayuda más reciente…","Other applications":"Otras aplicaciones","Recent applications":"Aplicaciones recientes",Search:"Buscar","Send feedback.":"Enviar opinión.","Show all":"Mostrar todo","Show less":"Mostrar menos","Show the previous page":"Mostrar la página anterior","Show the next page":"Mostrar la página siguiente",Show:"Mostrar","Was this page helpful?":"¿Le ha resultado útil esta página?"}},{meta:{isoCodes:["fi"],isoName:"Finnish",name:"Suomi"},ui:{TOPIC_UN AVAILABLE:"Valittu aihe ei ole tällä hetkellä käytettävissä",CONNECT_TO_INTERNET:"Varmista, että olet yhteydessä internetiin. Jos tarvitset apua yhteyden muodostamisessa, valitse Omenavalikko > Järjestelmäasetukset, osoita Verkko ja osoita Avusta.\nJos olet yhteydessä internetiin, mutta sisältö ei silti tule näkyviin, yritä myöhemmin uudelleen.","%@ Search Results":"%@ - hakutulokset","Apple applications":"Applen ohjelmat",Cancel:"Kumoa","Change Language":"Vaihda kieltä",Close:"Sulje","Featured application help":"Esittelyssä olevan ohjelman ohje","Go to the homepage":"Siirry kotisivulle","Help for:":"Ohje:",Hide:"Kätke",Home:"Koti","Loading latest help...":"Ladataan uusinta ohjetta…","Other applications":"Muut ohjelmat","Recent applications":"Äskeiset ohjelmat",Search:"Etsi","Send feedback.":"Lähetä palautetta.","Show all":"Näytä kaikki","Show less":"Näytä vähemmän","Show the previous page":"Näytä edellinen sivu","Show the next page":"Näytä seuraava sivu",Show:"Näytä","Was this page helpful?":"Oliko tästä sivusta apua?"}},{meta:{isoCodes:["fr"],isoName:"French",name:"Français"},ui:{TOPIC_UN AVAILABLE:"La rubrique sélectionnée est actuellement indisponible.",CONNECT_TO_INTERNET:"Assurez-vous d’être connecté à Internet. Pour obtenir de l’aide pour vous connecter, choisissez le menu Pomme > Préférences Système, cliquez sur Réseau puis sur Assistant.\nSi vous êtes connecté à Internet, mais que le contenu ne s’affiche toujours pas, réessayez ultérieurement.","%@ Search Results":"%@ résultats","Apple applications":"Applications Apple",Cancel:"Annuler","Change Language":"Changer de langue",Close:"Fermer","Featured application help":"Aide de l’application actuelle","Go to the homepage":"Aller à la page d'accueil","Help for:":"Aide pour :",Hide:"Masquer",Home:"Accueil","Loading latest help...":"Chargement de l’Aide la plus récente… ","Other applications":"Autres applications","Recent applications":"Applications récentes",Search:"Rechercher","Send feedback.":"Envoyer des commentaires.","Show all":"Affichage total","Show less":"Affichage partiel","Show the previous page":"Afficher la page précédente","Show the next page":"Afficher la page suivante",Show:"Afficher","Was this page helpful?":"Avez-vous trouvé cette page utile ?"}},{meta:{isoCodes:["he"],isoName:"Hebrew",name:"עברית"},ui:{TOPIC_UNAVA ILABLE:"×”× ×•×©× ×©× ×‘×—×¨ ××™× ×• זמין כעת.",CONNECT_TO_INTERNET:"ודא/×™ ×©×”×™× ×š מחובר/ת ×œ××™× ×˜×¨× ×˜. לעזרה ×‘× ×•×©× התחברות, בחר/×™ תפריט Apple > ״העדפות המערכת״, לחץ/×™ על ״רשת״ ובחרי ״עזור לי״.\nאם ×”×™× ×š מחובר/ת ×œ××™× ×˜×¨× ×˜, ובכל זאת התוכן ××™× ×• מופיע, × ×¡×”/×™ שוב מאוחר יותר.","%@ Search Results":"%@ תוצאות","Apple applications":"יישומי Apple",Cancel:"ביטול","Change Language":"החלף/×™ שפה",Close:"סגור","Featured application help":"עזרה ×‘× ×•×©× היישומים המומלצים","Go to the homepage":"עבור אל דף הבית","Help for:":"עזרה ×‘× ×•×©×:",Hide:"הסתר",Home:"בית","Loading latest help...":"טוען את קבצי העזרה החדשים ביותר…","Other applications":"יישומים אחרים","Recent applications":"יישומים ××—×¨×•× ×™×",Search:"חיפוש","Send feedback.":"שלח/×™ משוב.","Show all":"הצג הכול","Show less":"הצג פחות","Show the previous page":"הצג את העמוד הקודם","Show the next page":"הצג את העמוד הבא",Show:"הצג","Was this page helpful?":"האם עמוד ×–×” עזר לך?"}},{meta:{isoCodes:["hr"],isoName:"Croatian",name:"Hrvatski"},ui:{TOPIC_U NAVAILABLE:"Odabrana tema trenutno nije dostupna",CONNECT_TO_INTERNET:'Provjerite jeste li spojeni na internet. Za pomoć pri spajanju odaberite Apple izbornik > Postavke sustava, kliknite na Mreža i zatim na "Pomoć".\nAko ste spojeni na internet i sadržaj se svejedno ne pojavljuje, pokuÅ¡ajte ponovno kasnije.',"%@ Search Results":"Rezultata pretraživanja: %@","Apple applications":"Appleove aplikacije",Cancel:"Odustani","Change Language":"Promijeni jezik",Close:"Zatvori","Featured application help":"Pomoć za ponuÄ‘ene aplikacije","Go to the homepage":"Prijelaz na početnu stranicu","Help for:":"Pomoć za:",Hide:"Sakrij",Home:"Početna stranica","Loading latest help...":"Učitavanje najnovijih datoteka pomoći…","Other applications":"Ostale aplikacije","Recent applications":"Novije aplikacije",Search:"Pretraži","Send feedback.":"PoÅ¡alji povratne informacije.","Show all":"Prikaži sve","Show less":"Prikaži manje","Show the previous page":"Prikaži prethodnu stranicu","Show the next page":"Prikaži sljedeću stranicu",Show:"Prikaži","Was this page helpful?":"Je li vam ova stranica pomogla?"}},{meta:{isoCodes:["hu"],isoName:"Hungarian",name:"Magyar"},ui:{TOPIC _UNAVAILABLE:"A kijelölt témakör jelenleg nem érhetÅ‘ el.",CONNECT_TO_INTERNET:"GyÅ‘zÅ‘djön meg róla, hogy csatlakozik az internethez. Ha segÃtségre van szüksége, válassza az Apple menü > RendszerbeállÃtások menüpontot, kattintson a Hálózat, majd a „SegÃtség kérése” elemre.\nHa csatlakozik az internethez, és a tartalom továbbra sem jelenik meg, próbálja meg késÅ‘bb.","%@ Search Results":"%@ keresési eredmény","Apple applications":"Apple alkalmazások",Cancel:"Mégsem","Change Language":"Nyelv módosÃtása",Close:"Bezárás","Featured application help":"Kiemelt alkalmazássúgó","Go to the homepage":"Ugrás a kezÅ‘dlapra","Help for:":"Súgó a következÅ‘höz:",Hide:"Elrejtés",Home:"FÅ‘gomb","Loading latest help...":"Legújabb súgó betöltése…","Other applications":"Egyéb alkalmazások","Recent applications":"Legutóbbi alkalmazások",Search:"Keresés","Send feedback.":"Visszajelzés küldése","Show all":"Az összes megjelenÃtése","Show less":"Kevesebb megjelenÃtése","Show the previous page":"ElÅ‘zÅ‘ oldal megjelenÃtése","Show the next page":"KövetkezÅ‘ oldal megjelenÃtése",Show:"MegjelenÃtés","Was this page helpful?":"Hasznosnak találta ezt az oldalt?"}},{meta:{isoCodes:["id"],isoName:"Indonesian",name:"Bahasa Indonesia"},ui:{TOPIC_UNAVAILABLE:"Topik yang dipilih saat ini tidak tersedia",CONNECT_TO_INTERNET:"Pastikan Anda terhubung ke Internet. Untuk bantuan dalam menghubungkan, pilih menu Apple > Preferensi Sistem, klik Jaringan, dan klik “Bantu saya.”\nJika Anda terhubung ke Internet, dan konten masih tidak muncul, coba lagi nanti.","%@ Search Results":"%@ Hasil Pencarian","Apple applications":"Aplikasi Apple",Cancel:"Batal","Change Language":"Ubah Bahasa",Close:"Tutup","Featured application help":"Fitur bantuan aplikasi","Go to the homepage":"Kunjungi halaman rumah","Help for:":"Bantuan untuk:",Hide:"Sembunyikan",Home:"Rumah","Loading latest help...":"Memuat bantuan terbaru…","Other applications":"Aplikasi lain","Recent applications":"Aplikasi terbaru",Search:"Cari","Send feedback.":"Kirim umpan balik.","Show all":"Tampilkan semua","Show less":"Tampilkan sebagian","Show the previous page":"Tampilkan halaman sebelumnya","Show the next page":"Tampilkan halaman berikutnya",Show:"Tampilkan","Was this page helpful?":"Apakah halaman ini membantu?"}},{meta:{isoCodes:["it"],isoName:"Italian",name:"Italiano"},ui:{TOPI C_UNAVAILABLE:"L'argomento selezionato non è al momento disponibile.",CONNECT_TO_INTERNET:"Assicurati di essere connesso a Internet. Per assistenza su come configurare la connessione a Internet, scegli menu Apple > Preferenze di Sistema, fai clic su Network, quindi su “Aiutami”.\nSe sei connesso a Internet, ma non puoi visualizzare il contenuto, riprova più tardi.","%@ Search Results":"%@ risultati di ricerca","Apple applications":"Applicazioni Apple",Cancel:"Annulla","Change Language":"Cambia lingua",Close:"Chiudi","Featured application help":"Aiuto applicazione in primo piano","Go to the homepage":"Vai alla pagina iniziale","Help for:":"Aiuto per:",Hide:"Nascondi",Home:"Inizio","Loading latest help...":"Carico argomento dell'aiuto più recente…","Other applications":"Altre applicazioni","Recent applications":"Applicazioni recenti",Search:"Cerca","Send feedback.":"Invia commenti.","Show all":"Mostra tutto","Show less":"Mostra meno","Show the previous page":"Mostra pagina precedente","Show the next page":"Mostra pagina successiva",Show:"Mostra","Was this page helpful?":"Hai trovato utile questa pagina?"}},{meta:{isoCodes:["ja"],isoName:"Japanese",name:"日本語"},ui:{TOPI C_UNAVAILABLE:"選択したトピックは現在利用㠁§ãã¾ã›ã‚“",CONNECT_TO_INTERNET:"インターム1;ットに接続していることを確認㠁—てください。接続について調べたã&# 129;„ときは、アップルメニュー>「シスム†ãƒ 環境è¨å®šã€ã¨é¸æŠžã—、「ネットワー㠂¯ã€ã‚’クリックしてから「アシスタント」 ;をクリックします。\nã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æ Ž¥ç¶šã—ているのにコンテンツが表示ã&# 129;•ã‚Œãªã„å ´åˆã¯ã€å¾Œã§ã‚„ã‚Šç›´ã—ã¦ãã 9; さい。","%@ Search Results":"%@ 件の検索結果","Apple applications":"Apple アプリケーション",Cancel:"ã‚ャンセル","Change Language":"言語を変更",Close:"閉じる","Featured application help":"お勧めのアプリケーションヘルプ","Go to the homepage":"ホームページに移動","Help for:":"表示ä¸ã®ãƒ˜ãƒ«ãƒ—:",Hide:"éš ã™",Home:"ホーム","Loading latest help...":"最新のヘルプをèªã¿è¾¼ã¿ä¸...","Other applications":"ほかのアプリケーション","Recent applications":"最近使ったアプリケーション",Search:"æ¤œç´ ¢","Send feedback.":"フィードバックを送信","Show all":"すべてを表示","Show less":"一部を表示","Show the previous page":"前のページを表示","Show the next page":"次のページを表示",Show:"表示","Was this page helpful?":"このページは役立ちましã 9;Ÿã‹ï¼Ÿ"}},{meta:{isoCodes:["ko"],isoName:"Korean",name:"한글"},ui:{TOP IC_UNAVAILABLE:"ì„ íƒí•œ ì£¼ì œëŠ” 현재 ì‚¬ìš©í• ìˆ˜ 없습니다.",CONNECT_TO_INTERNET:"인터넷에 연결되어 있는지 확인하ì‹ì‹œì˜¤. 연결에 대한 도움말은 Apple 메뉴 > 시스템 í™˜ê²½ì„¤ì •ì„ ì„ íƒí•˜ê³ ë„¤íŠ¸ì›Œí¬ë¥¼ 클ë¦í•œ 다음 “도와주세요”를 클ë¦í•˜ì‹ì‹œì˜¤.\n인터넷에 연결되어 있지만 해당 ì½˜í…ì¸ ê°€ ì—¬ì „ížˆ 나타나지 않는 경우 나중에 다시 시도해보ì‹ì‹œì˜¤.","%@ Search Results":"%@개의 검색 ê²°ê³¼","Apple applications":"Apple 응용 프로그램",Cancel:"취소","Change Language":"언어 변경",Close:"닫기","Featured application help":"추천 응용 프로그램 도움말","Go to the homepage":"홈페이지로 이동","Help for:":"도움말:",Hide:"가리기",Home:"홈","Loading latest help...":"ìµœì‹ ë„ì›€ë§ 불러오는 중...","Other applications":"기타 응용 프로그램","Recent applications":"최근 사용 응용 프로그램",Search:"검색","Send feedback.":"피드백 보내기.","Show all":"모두 보기","Show less":"간단히 보기",Show:"보기","Show the previous page":"ì´ì „ 페이지 보기","Show the next page":"다음 페이지 보기","Was this page helpful?":"이 페이지가 도움이 되셨습니까?"}},{meta:{isoCodes:["ms"],isoName:"Malaysian",name:"Bahas a Malaysia"},ui:{TOPIC_UNAVAILABLE:"Topik yang dipilih tidak tersedia sekarang",CONNECT_TO_INTERNET:"Pastikan anda disambungkan ke Internet. Untuk bantuan sambungan, pilih menu Apple > Keutamaan Sistem, klik Rangkaian, dan klik “Bantu saya.”\nJika anda disambungkan ke Internet, dan kandungan masih tidak muncul, cuba lagi nanti.","%@ Search Results":"%@ Hasil Carian","Apple applications":"Aplikasi Apple",Cancel:"Batal","Change Language":"Tukar Bahasa",Close:"Tutup","Featured application help":"Bantuan untuk aplikasi yang ditampilkan","Go to the homepage":"Pergi ke laman utama","Help for:":"Bantuan untuk:",Hide:"Sembunyikan",Home:"Utama","Loading latest help...":"Memuatkan bantuan terbaru...","Other applications":"Aplikasi lain","Recent applications":"Aplikasi terbaru",Search:"Cari","Send feedback.":"Hantar maklum balas.","Show all":"Tunjukkan semua","Show less":"Tunjukkan sedikit","Show the previous page":"Tunjukkan halaman sebelumnya","Show the next page":"Tunjukkan halaman seterusnya",Show:"Tunjukkan","Was this page helpful?":"Adakah halaman ini membantu?"}},{meta:{isoCodes:["nl"],isoName:"Dutch",name:"Nederlands"},ui:{TOPI C_UNAVAILABLE:"Het geselecteerde onderwerp is momenteel niet beschikbaar",CONNECT_TO_INTERNET:"Controleer of er verbinding is met het internet. Als u hulp nodig hebt, kiest u Apple-menu > 'Systeemvoorkeuren' en klikt u vervolgens op 'Netwerk' en 'Assistentie'.\nAls u verbinding hebt met het internet en de inhoud nog steeds niet wordt weergegeven, probeert u het later nogHi Mac Attack,
My computer will not disconnect from the internet. It seems to find a clone router and continues even when I shut down and unplug my my own home iy
Your main question was 'chopped' in the title. Please reply in the body of a reply box with the full question and anything you have tried. And no, the long report was not helpful .
If the same website is opening each time you launch a browser (Safari?) hold down the shift key as you launch to prevent previous pages from opening.
Have a look at your settings in Safari > Preferences. Especially General and Privacy.
Reset Safari to remove cookies and other stored data.
System Preferences > General
Have a look at your settings in System Preferences > Security & Privacy.
Call back with more questions.
Regards,
Ian -
Managing Route-Map based MPLS VPN
1) How to derive the VPN information of the MPLS VPN configured using route-maps? As I understand, stitching route-maps information to derive VPN is complex as it is difficult to derive & correlate the filters tied to each of the route-maps that are tied to a VRF :(
2) Is there any MIB to get from the MIB
a) Route-maps tied to each VRF
b) What is the filter associated with each route-map?
c) Definition of each of the above filter
It would have been nice if the route-maps' name had global-significance within AS, so that we could have treated route-maps, pretty much like the route-tragets. Alas, I doubt it is :(
It should be noted here that if the MPLS VPN is configured using route targets, the VPN information derivation is fairly straight forward throught MplsVpn MIB.
So, the question is what is the simplest way to derive the MPLS VPN info given that they are configured using route-maps in BGP for labelled-route-distribution & for the pkt association with the VRFs.
Thanks,
Suresh REach CE in a customer VPN is also added to the management VPN by selecting the Join the management VPN option in the service request user interface.
The function of the management route map is to allow only the routes to the specific CE into the management VPN. The Cisco IOS supports only one export route map and one import route map per VRF.
http://www.cisco.com/en/US/products/sw/netmgtsw/ps4748/products_user_guide_chapter09186a0080353ac3.html -
BGP Outbound Route-Map Question
Hi Experts,
Just need your help again. I was trying to do some lab and I came across this weird behaviour with BGP outbound route-map. The diagram is simple.
Please see attached diagram. Sorry for the very poor illustration. R6 has iBGP peering to both R4 and R1. Both R1 and R4 have eBGP peering to R5. No IGP running on any routers as well to keep things simple. There are 2 things to do.
* Create a static route for 160.1.0.0/16 pointing to Null0 on both R1 and R4 and advertise to BGP via network statement but only R5 should be able to see the 160.1.0.0/16 route. R6 should not receive it.
* Advertise R5's /32 loopback interface to BGP but ensure R6 to have that route in its routing table. Don't use next-hop-self on both R1 and R4. Don't advertise WAN link via network command.
I'll just illustrate R4 and R6 here to keep things straight forward.
R4#sh ip bgp
BGP table version is 5, local router ID is 150.1.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 150.1.5.5/32 155.1.45.5 0 0 100 i
*> 160.1.0.0 0.0.0.0 0 32768 i
R6#sh ip bgp
BGP table version is 11, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* i150.1.5.5/32 155.1.45.5 0 100 0 100 i
* i 155.1.0.5 0 100 0 100 i
The first task was achieved as the 160.0.0.0/16 route is not present in R6's table. I used these commands in R4.
router bgp 65000
no synchronization
bgp log-neighbor-changes
network 160.1.0.0
neighbor 155.1.45.5 remote-as 100
neighbor 155.1.146.6 remote-as 65000
neighbor 155.1.146.6 route-map R6_OUT out
no auto-summary
route-map R6_OUT deny 5
match ip address prefix-list AGGR
route-map R6_OUT permit 1000
ip prefix-list AGGR seq 5 permit 160.1.0.0/16
So with the configuration above, it is clear that R4 is hitting route-map line 5 to deny 160.1.0.0/16 being advertised to R6. I tried to remove line 5 to validate as well if the /16 route will be advertised to R6 and it did so route-map configuration above is confirmed working.
Next, advertise loopback 0 of R5 to R6 and make sure it is a valid route in BGP table without the use of next-hop-self or WAN advertisement.
I used the following configuration.
ip prefix-list R5_LINK seq 5 permit 155.1.45.5/32
route-map R6_OUT permit 10
match ip route-source R5_LINK
set ip next-hop 155.1.146.4
I inserted line 10 in between route-map 5 and 1000. So R4 would check its route table for routes with 155.1.45.5 as route-source then advertise it to R6 with next-hop address of 155.1.146.4. It worked!
R6#sh ip bgp
BGP table version is 15, local router ID is 150.1.6.6
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>i150.1.5.5/32 155.1.146.4 0 100 0 100 i
* i 155.1.0.5 0 100 0 100 i
*>i160.1.0.0 155.1.146.4 0 100 0 i
As you can see above, 150.1.5.5 route is now a valid BGP route but surprisingly, the 160.1.0.0/16 route is there! From what I have seen, BGP skipped line 5 and started at 10. Even if I insert the same rule as line 5 and make it as line 15, it's not working. The /16 route is still being advertised. If I remove the match ip route-source clause in sequence 10 then it will withdraw the 160.1.0.0/16 route again. Looks like "match ip route-source" is not very friendly with direct filtering to BGP neighbors but I saw this being used with BGP inject-map and it worked well.
R4#sh route-map
route-map R6_OUT, deny, sequence 5
Match clauses:
ip address prefix-lists: AGGR
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map R6_OUT, permit, sequence 10
Match clauses:
ip route-source (access-lists): R5_LINK
Set clauses:
ip next-hop 155.1.146.4
Policy routing matches: 0 packets, 0 bytes
route-map R6_OUT, permit, sequence 1000
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes
Any thoughts why this is happening?
Thanks in advance.Hi John,
I did a small lab to test feature "match ip route-source" and it is working fine. Please check below config and output.
R4 does not have 172.16.16.0/24 and also routes for which next-hop is not 1.1.1.1. In case you still facing issue, please share output of "debug ip bgp updates out"
Topology
R1--ebgp--R3---ibgp---R4
R3#show ip b su | b Nei
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
1.1.1.1 4 100 34 36 29 0 0 00:27:37 7
4.4.4.4 4 300 9 12 29 0 0 00:04:12 0
R3#
R3#sh route-map TO-R4
route-map TO-R4, deny, sequence 10
Match clauses:
ip address prefix-lists: DENY-PREFIX
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map TO-R4, permit, sequence 20
Match clauses:
ip route-source (access-lists): 20
Set clauses:
Policy routing matches: 0 packets, 0 bytes
R3#
R3#show ip prefix-list DENY-PREFIX
ip prefix-list DENY-PREFIX: 1 entries
seq 5 permit 172.16.16.0/24
R3#
R3#sh ip access-lists 20
Standard IP access list 20
20 permit 1.1.1.1 (25 matches)
R3#
R3#show ip b
BGP table version is 29, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, x best-external
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* 172.16.8.0/22 1.1.1.1 0 0 100 i
*> 172.31.13.1 20 32768 i
*> 172.16.16.0/24 1.1.1.1 0 0 100 i
*> 172.16.17.0/24 1.1.1.1 0 0 100 i
*> 172.16.19.0/24 1.1.1.1 0 0 100 i
*> 172.16.20.0/22 1.1.1.1 0 0 100 i
* 172.16.24.0/30 1.1.1.1 0 0 100 i
*> 172.31.13.1 20 32768 i
*> 172.16.80.0/22 1.1.1.1 0 0 100 i
R3#
R4#show ip b
BGP table version is 53, local router ID is 4.4.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, x best-external
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
r>i172.16.17.0/24 1.1.1.1 0 100 0 100 i
r>i172.16.19.0/24 1.1.1.1 0 100 0 100 i
r>i172.16.20.0/22 1.1.1.1 0 100 0 100 i
*>i172.16.80.0/22 1.1.1.1 0 100 0 100 i
R4#
--Pls dont forget to rate helpful posts--
Regards,
Akash -
Hi,
what is the reason for not having any match, in the acl for the route-map?
Current configuration : 1731 bytes
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R2
boot-start-marker
boot-end-marker
no aaa new-model
memory-size iomem 5
ip cef
interface Loopback0
ip address 192.168.0.1 255.255.255.0
interface Loopback1
ip address 192.168.1.1 255.255.255.0
interface Loopback200
ip address 196.0.0.1 255.255.255.0
interface FastEthernet0/0
ip address 195.0.0.1 255.255.255.0
ip policy route-map r_teste
duplex auto
speed auto
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial1/0
ip address 10.0.0.2 255.255.255.252
serial restart-delay 0
interface Serial1/1
ip address 172.16.0.2 255.255.255.252
serial restart-delay 0
clock rate 128000
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
router bgp 100
no synchronization
bgp log-neighbor-changes
network 192.168.0.0
network 192.168.1.0
neighbor 10.0.0.1 remote-as 200
neighbor 172.16.0.1 remote-as 300
no auto-summary
ip http server
no ip http secure-server
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 172.16.0.1
access-list 40 permit any
route-map anuncia1 permit 20
match ip address 20
route-map anuncia0 permit 10
match ip address 10
route-map r_teste permit 10
match ip address 40
set ip default next-hop 10.0.0.1
control-plane
line con 0
line aux 0
line vty 0 4
login
end
R2#ping 192.168.55.1 source 195.0.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.55.1, timeout is 2 seconds:
Packet sent with a source address of 195.0.0.1
Success rate is 0 percent (0/5)
R2#sh access-lists
Standard IP access list 10
10 permit 192.168.0.0, wildcard bits 0.0.0.255
Standard IP access list 20
10 permit 192.168.1.0, wildcard bits 0.0.0.255
Standard IP access list 30
10 permit 195.0.0.0, wildcard bits 0.0.0.255
Standard IP access list 40
10 permit any
Extended IP access list 100
10 permit ip any 192.168.55.0 0.0.0.255
R2#
is possible without changing the bgp?
thanksDefault PBR:
All packets received on an interface (ingress) with PBR enabled are entertained, first they should match through ACL then forward to next hop. if a match is exist (through ACL) but not forward to next hop then do nothing this packet especially for ICMP packet.
I think you need Local PBR:
Packets that are generated by the router are not normally policy-routed. To enable local PBR for such packets, indicate which route map the router should use by using the following command in global configuration mode:
ip local policy route-map TEST
Regards,
kazim -
I have a 6509 that I've setup with route-maps in order to route VLANs in different ways. For example, if we wanted some vlans to get out to the internet we would route them to a certain address. Then there is another vlan that we route to another internet gateway. It was all working pretty good until we swapped out another switch gateway in the network and every since things have been wonky. It seems as though the switch is routing packets that would normally stay on that switch out of the switch then back in, even though my access-list are set to deny the traffic. Here are the access-list and route-maps:
access-list 10 permit 192.168.24.101
access-list 10 permit 192.168.24.102
access-list 100 permit tcp any 172.16.0.0 0.0.255.255 established
access-list 100 permit tcp 192.168.4.0 0.0.3.255 host 172.16.1.10 eq www
access-list 100 permit tcp 192.168.4.0 0.0.3.255 host 172.16.1.11 eq www
access-list 104 permit ip host 172.16.4.11 host 65.54.150.19
access-list 104 permit tcp host 172.16.4.20 any eq www
ip access-list extended BITCENTRAL_INTERNET
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 192.168.4.0 0.0.3.255
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
permit ip host 172.16.1.170 any
permit ip host 172.16.1.150 any
ip access-list extended EDIT_BAYS
deny ip any 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 any
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
permit ip host 192.168.25.2 any
permit ip host 192.168.26.80 any
permit ip host 192.168.25.104 any
permit ip host 192.168.25.3 any
permit ip host 192.168.26.69 any
permit ip host 192.168.26.71 any
permit ip host 192.168.27.33 any
ip access-list extended ENPS
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 192.168.4.0 0.0.3.255
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
permit ip host 192.168.24.101 any
permit ip host 192.168.24.102 any
permit ip host 192.168.24.103 any
ip access-list extended ENTRIQ
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 192.168.4.0 0.0.3.255
deny ip 172.16.0.0 0.0.255.255 192.168.24.0 0.0.3.255
deny ip 192.168.24.0 0.0.3.255 172.16.0.0 0.0.255.255
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
permit ip 172.16.8.0 0.0.0.255 any
ip access-list extended MISC
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 192.168.4.0 0.0.3.255
deny ip 172.16.0.0 0.0.255.255 192.168.24.0 0.0.3.255
deny ip 192.168.24.0 0.0.3.255 172.16.0.0 0.0.255.255
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
permit ip 172.16.11.0 0.0.0.255 any
ip access-list extended Omneon
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 192.168.4.0 0.0.3.255
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
permit ip host 172.16.2.11 any
permit ip host 172.16.2.2 any
ip access-list extended ROSS-VLAN
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
deny ip 172.16.0.0 0.0.255.255 192.168.4.0 0.0.3.255
deny ip 192.168.4.0 0.0.3.255 172.16.0.0 0.0.255.255
permit ip host 172.16.4.20 any
permit ip host 172.16.4.32 any
permit ip host 172.16.4.31 any
permit ip host 172.16.4.29 any
permit ip host 172.16.4.30 any
permit ip host 172.16.4.28 any
vlan internal allocation policy ascending
vlan access-log ratelimit 2000
interface Vlan1
no ip address
shutdown
interface Vlan10
ip address 172.16.1.1 255.255.255.0
ip policy route-map BITCENTRAL
interface Vlan20
ip address 172.16.2.1 255.255.255.0
ip policy route-map OMNEON
interface Vlan30
ip address 172.16.3.1 255.255.255.0
interface Vlan40
ip address 172.16.4.1 255.255.255.0
ip policy route-map ROSS-VLAN
interface Vlan50
ip address 172.16.5.1 255.255.255.0
interface Vlan60
ip address 172.16.6.1 255.255.255.0
interface Vlan70
ip address 172.16.7.1 255.255.255.0
interface Vlan80
ip address 172.16.8.1 255.255.255.0
ip policy route-map ENTRIQ
interface Vlan100
ip address 192.168.27.1 255.255.252.0
ip helper-address 192.168.7.255
ip policy route-map OMNIBUS-VLAN
interface Vlan110
ip address 172.16.11.1 255.255.255.0
ip helper-address 192.168.27.200
ip policy route-map MISC
interface Vlan120
ip address 172.16.10.1 255.255.255.240
ip policy route-map EDIT_BAYS
interface Vlan140
ip address 192.168.4.15 255.255.255.0
ip directed-broadcast 10
interface Vlan500
ip address 192.168.1.19 255.255.255.224
ip classless
ip route 172.22.0.0 255.255.255.248 192.168.4.1
ip route 192.168.0.0 255.255.255.224 192.168.4.254
ip route 192.168.5.0 255.255.255.0 192.168.4.1
route-map BITCENTRAL permit 60
match ip address BITCENTRAL_INTERNET
set ip next-hop 192.168.4.1
route-map EDIT_BAYS permit 50
match ip address EDIT_BAYS
set ip next-hop 192.168.4.1
route-map ENTRIQ permit 80
match ip address ENTRIQ
set ip next-hop 172.16.8.254
route-map MISC permit 40
match ip address MISC
set ip next-hop 192.168.4.1
route-map MSN permit 10
match ip address 104
set ip next-hop 192.168.4.1
route-map OMNEON permit 20
match ip address Omneon
set ip next-hop 192.168.4.1
route-map OMNIBUS-VLAN permit 30
match ip address EDIT_BAYS
set ip next-hop 192.168.4.1
route-map OMNIBUS-VLAN permit 40
match ip address ENPS
set ip next-hop 192.168.4.1
route-map ROSS-VLAN permit 70
match ip address ROSS-VLAN
set ip next-hop 192.168.4.1
route-map SEC-VLAN permit 30
match ip address SEC-VLAN
set ip next-hop 192.168.4.1
Here is how we tested the system and found the error. We cut the connection to 192.168.4.1 router, and when we try to ping a host on the 100 VLAN with the ip address of 192.168.24.101 from the MISC vlan with a ip address of 172.168.11.9 the ping just fails. When we enable the connection to the 192.168.4.1 router the pings go through again. What in my route-map is causing this, I thought I setup the deny rules pretty good?Hi Mike,
Between you and me, this is a lengthy config you have there.
Next don't forget that a route-map doesn't apply to traffic originated or destined to the self-device, unless you use ip local policy in which might work, but there I have seen some nasty bugs.
So if you can shorten your config to one example, then do the tests :
- sourced from device A (it can be the SVI of another switch)
- through your 6509
- destined to device B (it also can be the SVI of another switch, or even simpler some loopback inteface). -
What is the second, third, etc. next-hop address in the route-map set command for?
route-map TEST_PBR permit 10 match
match ip address 101
router(config-route-map)#set ip next-hop 1.1.1.1 ?
A.B.C.D IP address of next hopHi,
You may get your answer in below link
http://www.groupstudy.com/archives/ccielab/200812/msg00999.html
First next-hop will be used unless until that is not unreachable. If first is unreachable, then next one will be used. Since these next-hops are directly connected, router can easily come to know whether they are active or not. In case you want to set some loopback ip as next-hop then you need to use keyword recursive "set ip next-hop recursive"
--Pls dont forget to rate helpful posts--
Regards,
Akash -
Local policy route-map for policy route
Hi
this is related my previous question:
I want to set policy route on asr1004, that redirect vpn traffic.
my case is:
asr1004 import a default route 0.0.0.0 from int 0 with bgp neibour address 10.100.100.100
assume internal traffic 10.10.10.0/24 coming into asr1004 on int 1.
assume vpn with ip address 10.2.2.2 is direct linked to asr1004 int 2, and int 2 ip address is 10.2.2.1
assume taget network is 10.200.200.0/24
I want internal traffic (10.10.10.0/24) go to target (10.200.200.0/24) to be redirect to10.2.2.2 (vpn) first, so I add "ip route 10.200.200.0/24 10.2.2.2" on asr1004.
Than, I want vpn (10.2.2.2) encrypt traffic and send it to one of ip in10.200.200.0/24 range again. at this point if I put local policy route-map below, is it will work?
ip local policy route-map vpn-out
access-list 100 permit ip 10.2.2.2 any
route-map vpn-out permit 10
match ip address 100
set ip next-hop 10.100.100.100
if not, do I have any change to do policy route for this case?
any comment will be appreciated
Thanks in advance
Julxuhi Jon
can I refresh the question again:
my case is:
asr1004 import a default route 0.0.0.0 from int 0 with bgp neibour address 10.100.100.100
assume internal traffic 10.10.0.0/16 coming into asr1004 on int 1 with ip address 10.3.3.3
assume vpn with ip address 10.10.2.2 is direct linked to asr1004 int 2, and int 2 ip address is 10.10.2.1
assume taget network is 10.200.200.0/24
I want internal traffic (10.10.0.0/16) go to target (10.200.200.0/24) to be redirect to10.10.2.2 (vpn) first, so I add "ip route 10.200.200.0/24 10.10.2.2" on asr1004.
Than, I want vpn (10.10.2.2) encrypt traffic and send it to one of ip in10.200.200.0/24 range again. at this point if I put local policy route-map below, is it will work?
ip local policy route-map vpn-out
access-list 100 permit ip 10.10.2.2 any
route-map vpn-out permit 10
match ip address 100
set ip next-hop 10.100.100.100
such as:
interface TenGigabitEthernet0/0/0
description bgp to get default
ip address 10.100.100.100 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
interface TenGigabitEthernet0/1/0
description get internaltraffic
ip address 10.3.3.3 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
interface GigabitEthernet0/2/1
description vpn
ip address 10.10.2.1 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
media-type rj45
negotiation auto
ip local policy route-map vpn-out
access-list 100 permit ip 10.10.2.2 any
route-map vpn-out permit 10
match ip address 100
set ip next-hop 10.100.100.100
ip route 10.200.200.0/24 10.10.2.2
Could you please advise if it is correct? -
Cisco 4900m, pbr, route-map
Hi,
My customer has a question, what is the limit for entries for the route-map for PBR that will be done in hardware? This applies to soft-4900M 12.2 (53) SG2. I need a reference to documentation.
Regards,
lbHi Lukasz,
the 4900M is a Data Center Switch and not a Metro one, so it is more appropriate if you post these types of questions on Network Infrastructure > LAN Switching and Routing section
(the 4900M should not be confused with the ME4900 series, which are Metro switches instead).
Anyway it supports 128.000 Security and Quality-of-Service (QoS) Hardware Entries as documented here:
http://www.cisco.com/en/US/products/ps6021/prod_models_comparison.html
and here:
http://www.cisco.com/en/US/partner/prod/collateral/switches/ps5718/ps6021/ps9310/Data_Sheet_Cat_4900M.html
regards,
Riccardo -
Hi All,
I have just taken over supporting a network, and have come accross a route map, that I don't really understand. The route-map is copied below. Can anyone please tell me step by step how its processed, and what the outcome is?
route-map test permit 5
match ip address prefix-list path_one_prefer
route-map test permit 10
match as-path 3
route-map test permit 20
match ip address prefix-list route-filter
set as-path prepend 65100
ip prefix-list path_one_prefer seq 5 permit 10.10.0.0/16
ip as-path access-list 3 permit _65000_
ip prefix-list route-filter seq 10 deny 172.130.1.0/28
ip prefix-list route-filter seq 15 deny 172.131.1.248/29
ip prefix-list route-filter seq 20 deny 172.200.128.0/27
The route map is applied outbound towards an ebgp peer
Many Thanks
RussHello Russ,
Yes that is indeed the case.
route-map test permit 20
match ip address prefix-list route-filter
set as-path prepend 65100
!ip prefix-list route-filter seq 10 deny 172.130.1.0/28
ip prefix-list route-filter seq 15 deny 172.131.1.248/29
ip prefix-list route-filter seq 20 deny 172.200.128.0/27
In the route-map lines 20 - it is set to "match ip address prefix-list route-filter"
Since the deny is in place in the prefix list, take it as "Not these ones"
Everything else is permitted and AS-Path prepended.
After line 20 there is no other - ACL logic - explicit deny - so if there is no match, its a deny, so the prefix's in the prefix-list "route-filter" are not advertised.
This line 20 seems to be the "catch all" other routes except for these ones i.e. that prefix list, and prepend them.
Check the routes you are advertising them as I stated in my first post with "show ip bgp neigh x.x.x.x advertised-routes" which should correlate with the route-map applied to your BGP peer.
Hope this makes it clear. -
Route Map Policy on SVI - Trunk from ESX
Hi,
I have a question regarding the following configuration.
A route map matches traffic from a particular subnet, say on VLAN 10 (using an ACL).
A route map policy is applied on this SVI (int vlan 10)
A server on this subnet is running on ESX which is connected to the switch on a trunk port.
The ESX host tags all frames from this server as VLAN 10.
In this scenario, should the route map pick up the traffic from this server? I don't see why not, but in my testing it doesn't seem to be working :)
Thanks for any help.Hi Alex,
It's a 3750x (stack) with 12.2(55)SE5.
I've already changed the SDM template to routing and rebooted the switch.
I don't think the route map is working at all actually :) See config below, let me know if you can spot anything obvious but the networks on the ACL are definitely correct.
Thanks again.
Extended IP access list UPLINK2
10 permit ip 192.168.1.0 0.0.0.255 any
20 permit ip 192.168.4.0 0.0.1.255 any (305 matches)
route-map ROUTE1 permit 10
match ip address UPLINK2
set ip next-hop 10.1.1.253
interface Vlan10
ip address 192.168.5.254 255.255.254.0
ip policy route-map ROUTE1
end -
Yesterday updated IO6 and found map they are using is too old, compare to earlier version, cannot see Traffic, No Route Map there, Cannot Hear Voice..
This is very big problem...If images are missing then check that you aren't blocking images from some domains.
*Check the permissions for the domain in the current tab in "Tools > Page Info > Permissions"
*Check that images are enabled: Tools > Options > Content: [X] Load images automatically
*Check the exceptions in "Tools > Options > Content: Load Images > Exceptions"
*Check the "Tools > Page Info > Media" tab for blocked images (scroll through all the images with the cursor Down key).
If an image in the list is grayed and there is a check-mark in the box "<i>Block Images from...</i>" then remove that mark to unblock the images from that domain.
Make sure that you do not block third-party images permissions.default.images
There are also extensions (Tools > Add-ons > Extensions) and security software (firewall, anti-virus) that can block images.
*http://kb.mozillazine.org/Images_or_animations_do_not_load -
Packets not hitting the route-map's NAT access-list
Hi Everyone,
I've been struggling with this issue for two days, I have couple of VPN tunnels on a router and all are working fine with NAT because I created route-maps for nat to deny the packets that are going to the tunnel from getting NATed, I have the same config for all the tunnels but the issue is with xxx_NAT access-list that is not even being hit by the packets so my xxx tunnel wont come up. I am positive that the problem is NAT because when I remove NAT from the 0/1.102 interface it starts to work. here is my config :
interface GigabitEthernet0/1.102
description "xxx"
encapsulation dot1Q 102
ip address 10.300.301.1 255.255.255.0
ip access-group xxx_ACL in
ip nat inside
ip virtual-reassembly
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat pool ???_POOL ??
ip nat pool ???_POOL ??
ip nat pool ???_POOL ??
ip nat pool xxx_POOL ??
ip nat inside source route-map ??? pool ???_POOL overload
ip nat inside source route-map ??? pool ???_POOL overload
ip nat inside source route-map xxx pool xxx_POOL overload
ip nat inside source route-map ??? pool ???_POOL overload
ip access-list extended xxx-VPN
remark VPN to xxx
permit ip 10.300.301.0 0.0.0.255 192.168.45.0 0.0.0.255
permit ip 192.168.45.0 0.0.0.255 10.300.301.0 0.0.0.255
ip access-list extended xxx_ACL
deny ip 10.300.301.0 0.0.0.255 192.168.56.0 0.0.0.255
permit ip any any
ip access-list extended xxx_NAT
deny ip 10.300.301.0 0.0.0.255 110.110.2.0 0.0.0.255
deny ip 10.300.301.0 0.0.0.255 192.168.45.0 0.0.0.255
permit ip 10.300.301.0 0.0.0.255 any
route-map ??? permit 10
match ip address ???_NAT
route-map xxx permit 10
match ip address xxx_NAT
route-map ??? permit 10
match ip address NAT_???
route-map ??? permit 10
match ip address ???_NAT
control-plane
banner motd ^CAs that is probably *not* the config you are having problems with (or are your route-maps really named ???, xxx etc. ?) it is hard to help.
So just a guess:
The "ip nat inside source route-map-"staements are processed in a lexical order. The naming of your route-maps has to reflect the order you want to achieve. If you have the wrong order your traffic will end in the wrong translation which you should see with "show ip nat translation".
HTH, Karsten -
Why packets are being translated by one route-map and not the other?
Hi,
I have 2 NAT rules, each with a route-map to determine which packets are translated. What I don't understand is how to control which NAT rule is applied first..?
In my config, the first of the following rules is applied first, and then the other. I would like to have it the other way round, the second being applied first, and the first being applied second.
ip nat inside source route-map NAT_INTERNET_ACCESS_RMAP interface GigabitEthernet0/1 overload
ip nat inside source static 172.16.101.1 10.10.11.1 route-map NAT_RADIANZ_PIXACCESS_RMAP
The reason why I want it this way round is because the first rule NAT's almost everything so that I can access the Internet. The second rule NAT's specific traffic to a different address.
If I want traffic to be NATTED according to the second rule, I have to deny traffic in the first associated ACL, and permit it in the second ACL. That means I basically have to configure each ACL each time I want packets to be matched by the second NAT rule - there must be a better way of doing it!!!
Any help would be most appreciated.
Many thanks,
Michael.Hello, here's the basic (shortened list). If I want packets to be matched by NAT_RADIANZ_PIXACCESS_ACL I have to put a deny in NAT_INTERNET_ACCESS_ACL. If I could make sure that the first list is used first, and then anything left over compared against the second, then it would make life/editing much easier...
Cheers,
Michael
ip nat inside source route-map NAT_INTERNET_ACCESS_RMAP interface GigabitEthernet0/1 overload
ip nat inside source static udp 10.10.11.1 500 10.10.11.1 500 extendable
ip nat inside source static udp 10.10.11.1 4500 10.10.11.1 4500 extendable
ip nat inside source static 172.16.101.1 10.10.11.1 route-map NAT_RADIANZ_PIXACCESS_RMAP
ip access-list extended NAT_INTERNET_ACCESS_ACL
remark Traffic to Branch A (over VPN)
deny ip 172.16.101.0 0.0.0.255 192.168.1.0 0.0.0.255
remark Traffic to Branch B (over VPN)
deny ip 172.16.101.0 0.0.0.255 172.16.0.0 0.0.0.255
deny ip 172.16.101.0 0.0.0.255 172.16.1.0 0.0.0.255
deny ip 172.16.101.0 0.0.0.255 172.16.2.0 0.0.0.255
deny ip 172.16.101.0 0.0.0.255 172.16.3.0 0.0.0.255
remark Traffic to Cust A (over VPN)
deny ip host 172.16.101.1 host 192.168.0.1
deny ip host 172.16.101.2 host 192.168.0.1
remark Traffic to Cust B (over VPN)
deny ip host 172.16.101.1 host 192.168.0.2
deny ip host 172.16.101.2 host 192.168.0.2
remark Traffic to Cust C (over Radianz VPN)
deny ip host 172.16.101.1 host 192.168.0.3
deny ip host 172.16.101.2 host 192.168.0.3
remark Traffic to Cust D (over Radianz VPN)
deny ip host 172.16.101.1 host 192.168.0.4
deny ip host 172.16.101.2 host 192.168.0.4
permit ip any any
ip access-list extended NAT_RADIANZ_PIXACCESS_ACL
remark Manangement Traffic to Cust C
permit icmp host 172.16.101.1 host xxx.xxx.xxx.xxx
permit icmp host 172.16.101.2 host xxx.xxx.xxx.xxx
permit tcp host 172.16.101.1 host xxx.xxx.xxx.xxx eq 22
permit tcp host 172.16.101.2 host xxx.xxx.xxx.xxx eq 22
remark Manangement Traffic to Cust D
permit icmp host 172.16.101.1 host xxx.xxx.xxx.xxx
permit icmp host 172.16.101.2 host xxx.xxx.xxx.xxx
permit tcp host 172.16.101.1 host xxx.xxx.xxx.xxx eq 22
permit tcp host 172.16.101.2 host xxx.xxx.xxx.xxx eq 22
route-map NAT_RADIANZ_PIXACCESS_RMAP permit 10
match ip address NAT_RADIANZ_PIXACCESS_ACL
set ip next-hop 10.10.11.14
route-map NAT_INTERNET_ACCESS_RMAP permit 40
match ip address NAT_INTERNET_ACCESS_ACL
set ip next-hop xxx.xxx.xxx.xxx -
Can't apply policy route-map on C3750 stack vlan interface
Hi All.
I've come up with this problem and i could see some people have had the same issue. I've tried to overlook and check other replies but it didn't help me. So I'm hoping someone could spot the problem. Here are the details:
2 x WS-C3750G-24T-E in stack
Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
switch#sh sdm prefe
The current template is "desktop IPv4 and IPv6 routing" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses: 1.5K
number of IPv4 IGMP groups + multicast routes: 1K
number of IPv4 unicast routes: 2.75K
number of directly-connected IPv4 hosts: 1.5K
number of indirect IPv4 routes: 1.25K
number of IPv6 multicast groups: 1.125k
number of directly-connected IPv6 addresses: 1.5K
number of indirect IPv6 unicast routes: 1.25K
number of IPv4 policy based routing aces: 0.25K
number of IPv4/MAC qos aces: 0.5K
number of IPv4/MAC security aces: 0.5K
number of IPv6 policy based routing aces: 0.25K
number of IPv6 qos aces: 0.5K
number of IPv6 security aces: 0.5K
There are 2 ISPs, G1/0/1 and G2/0/1. After creating a route-map i can apply a policy route-map to Vlan5 and it accepts without any errors. But when you do sh run vlan5 the command is not there, it's not applied.
Any help will be appretiated.
Thanks.Hi Jon.
Thanks for your reply. I didn't put those configs as they're basic without use of VRF and WCCP. Also i've checked or tried to find the list of unsupported commands and didn't see them in that list. See config below with some extras:
track 11 rtr 1 reachability
track 22 rtr 2 reachability
ip routing
no ip dhcp use vrf connected
interface GigabitEthernet1/0/1
description ISP1
no switchport
ip address 9.9.9.2 255.255.255.252
no ip proxy-arp
no ip mroute-cache
speed 100
duplex full
ipv6 address 2B01:4B8:0:3::2/64
ipv6 ospf 1 area 0
no mdix auto
no cdp enable
interface GigabitEthernet2/0/1
description ISP2
no switchport
ip address 9.9.9.5 255.255.255.252
ip ospf cost 10000
speed 1000
duplex full
ipv6 address 2B01:4B8:0:7::2/64
ipv6 enable
ipv6 ospf cost 10000
ipv6 ospf 1 area 0
interface Vlan5
description Company Ext Subnet
ip address 9.9.8.1 255.255.255.128
no ip proxy-arp
no ip mroute-cache
ipv6 address 2B01:4B8:1:22::1/64
ipv6 ospf 1 area 15
access-list 111 permit tcp any any eq www
route-map pbr1 permit 10
match ip address 111
set interface GigabitEthernet2/0/1 GigabitEthernet1/0/1
route-map pbr1 permit 20
set interface GigabitEthernet1/0/1 GigabitEthernet2/0/1
route-map pbr2 permit 10
match ip address 111
set ip next-hop verify-availability 9.9.9.6 1 track 11
set ip next-hop 9.9.9.1
route-map pbr2 permit 20
set ip next-hop verify-availability 9.9.9.1 1 track 22
set ip next-hop 9.9.9.6
I've tried to apply both policies pbr1 and pbr2, it allowed to do that without errors but at the end it wasn't there.
Cheers,
Maybe you are looking for
-
ITunes spontaneously closes - no error message
I've just started having recent - but consistent - problems on my WinXP system. iTunes runs, and can see my iPod Touch. I want to add video files to it. So I select File > Add Folder to Library. I navigate to the folder containing my videos. I click
-
ACS20001: An error occurred while processing a WS-Federation sign-in response.
Hey guys, can anyone help with this? I'm trying to access Visual Studio from home, however when trying to log in, i get this error. An error occurred while processing your request. HTTP Error Code: 400 Message: ACS20001: An error occurred while proce
-
I had to do a restore from backup on my iphone today because an app just totally messed up the phone. I restored from back up successfully i think all my info was back on the phone. The only problem is that now, since this is the first time that this
-
Long Text In ALV - Exporting to Excel sheet
Hi, Currently my ALV report reads the text using READ_TEXT fm and it displays only the first line of the text in the report. To the see the remaining lines of the text, user needs to double click on the text in the report and it creates another ALV r
-
How can I change the function of a flash button?
Hello, Not sure if this should go in the Flash forum or Captivate forum, but does anyone know how where to find ActionScript 3 commands for Captivate? I downloaded a pre-made Flash button (source file) for Adobe Captivate that was originally made to