客戶反饋當前設備做了策略路由,然後抓包發現,流量是按照靜態路由走了。之前做的策略路由都是沒有問題的,但是這個新增的策略路由無法生效
查看acl資源是正常的
<DC-CORE>dis qos-acl resource
Interfaces: XGE1/0/1 to XGE1/0/48, HGE1/0/49
HGE1/0/50, HGE1/0/51
HGE1/0/52, HGE1/0/53
HGE1/0/54 (slot 1)
---------------------------------------------------------------------
Type Total Reserved Configured Remaining Usage
---------------------------------------------------------------------
TTI ACL 512 0 0 512 0%
IPCL0 ACL 2048 21 408 1619 20%
IPCL1 ACL 256 0 0 256 0%
IPCL2 ACL 256 32 0 224 12%
IPCL0 Counter 4096 19 408 3669 10%
IPCL1 Counter 1024 0 0 1024 0%
IPCL2 Counter 1024 30 0 994 2%
EPCL ACL 256 0 0 256 0%
EPCL Counter 1024 0 0 1024 0%
IPCL Meter 3072 2 0 3070 0%
EPCL Meter 4608 0 0 4608 0%
Interfaces: XGE2/0/1 to XGE2/0/48, HGE2/0/49
HGE2/0/50, HGE2/0/51
HGE2/0/52, HGE2/0/53
HGE2/0/54 (slot 2)
---------------------------------------------------------------------
Type Total Reserved Configured Remaining Usage
---------------------------------------------------------------------
TTI ACL 512 0 0 512 0%
IPCL0 ACL 2048 21 408 1619 20%
IPCL1 ACL 256 0 0 256 0%
IPCL2 ACL 256 32 0 224 12%
IPCL0 Counter 4096 19 408 3669 10%
IPCL1 Counter 1024 0 0 1024 0%
IPCL2 Counter 1024 30 0 994 2%
EPCL ACL 256 0 0 256 0%
EPCL Counter 1024 0 0 1024 0%
IPCL Meter 3072 2 0 3070 0%
EPCL Meter 4608 0 0 4608 0%
acl advanced 3011
rule 0 permit ip source 172.29.98.212 0 destination 222.9.9.193 0
rule 5 permit ip source 222.9.9.193 0 destination 172.29.98.212 0
acl advanced 3010
rule 0 permit ip source 172.29.98.212 0 destination 222.9.9.193 0
policy-based-route pbr98test permit node 10
if-match acl 3010
apply next-hop 172.29.99.2
interface Vlan-interface98
ip address 172.29.98.1 255.255.255.0
ip policy-based-route pbr98test
[DC-CORE]dis arp 172.29.99.2
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
172.29.99.2 a41a-3af4-201b 99 BAGG2 796 D
[DC-CORE]dis arp 172.29.98.212
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
172.29.98.212 0050-5690-ef49 98 BAGG11 1142 D
Aggregate Interface: Bridge-Aggregation2
Aggregation Mode: Static
Loadsharing Type: Shar
Management VLANs: None
Port Status Priority Oper-Key
XGE1/0/2(R) S 32768 1
XGE2/0/2 S 32768 1
Aggregate Interface: Bridge-Aggregation11
Aggregation Mode: Static
Loadsharing Type: Shar
Management VLANs: None
Port Status Priority Oper-Key
XGE1/0/11(R) S 32768 11
XGE2/0/11 S 32768 11
[DC-CORE]dis qos policy interface
Interface: Ten-GigabitEthernet1/0/2
Direction: Outbound
Policy: 1
Classifier: 1
Operator: AND
Rule(s) :
If-match acl 3011
Behavior: 1
Accounting enable:
0 (Packets)
Interface: Ten-GigabitEthernet1/0/11
Direction: Outbound
Policy: 1
Classifier: 1
Operator: AND
Rule(s) :
If-match acl 3011
Behavior: 1
Accounting enable:
3 (Packets)
Interface: Ten-GigabitEthernet2/0/2
Direction: Outbound
Policy: 1
Classifier: 1
Operator: AND
Rule(s) :
If-match acl 3011
Behavior: 1
Accounting enable:
0 (Packets)
Interface: Ten-GigabitEthernet2/0/11
Direction: Outbound
Policy: 1
Classifier: 1
Operator: AND
Rule(s) :
If-match acl 3011
Behavior: 1
Accounting enable:
0 (Packets)
(0)
看配置很多PBR都指定的下一跳是172.29.99.2,這些PBR都是能正常匹配的是嗎
看著不像資源不夠
#
policy-based-route lab permit node 10
if-match acl 3900
apply next-hop 172.29.99.2
#
policy-based-route lab-97 deny node 5
if-match acl name dc-localnet
#
policy-based-route lab-97 permit node 10
if-match acl name lab-97
apply next-hop 172.29.99.2
#
(0)
親~登錄後才可以操作哦!
確定你的郵箱還未認證,請認證郵箱或綁定手機後進行當前操作
舉報
×
侵犯我的權益
×
侵犯了我企業的權益
×
抄襲了我的內容
×
原文鏈接或出處
誹謗我
×
對根叔社區有害的內容
×
不規範轉載
×
舉報說明
暫無評論