Forum Discussion

ltp_55848's avatar
ltp_55848
Icon for Nimbostratus rankNimbostratus
Jun 29, 2011

Wildcard forwarding for direct node traffic with PBR

Hi All,     Apologies if this question has been asked before; I've waded my way through a lot of forum posts but haven't seen the problem I'm facing - feel free to prove otherwise.     I a...
config
design
The_Bhattman's avatar
The_Bhattman
Icon for Nimbostratus rankNimbostratus
Jun 30, 2011
Hi Ltp,

 

Cisco did some changes with pBR within Nexus vs the IOS. Especially when ACL's do not allow DENY statements when using it under pBR.

 

 

Try the following as a test.

 

 

 

ip access-list TEST_deny

 

10 permit tcp 10.4.0.0/16 10.2.0.0/16

 

 

ip access-list TEST_allow

 

10 permit tcp 10.4.0.0/16 eq www any

 

 

route-map TEST deny 10

 

match ip address TEST_Deny

 

route-map TEST permit 20

 

match ip address TEST_alllow

 

set ip next-hop 10.4.0.10

 

 

 

 

I hope this helps

 

 

Bhattman