Policy Based Routing Question

Policy Based Routing Question

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Policy Based Routing Question darktiger 11-13-2005
Posted by darktiger on November 13, 2005, 7:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,
Firstly, I have searched this group over - but can't find the exact
details.
Here is the situation:
Two ISPs, one gives 12.zzz.xxx.0/24 to us, and the other just gives us
206.yy.xxx.30. I want all traffic from our network that has a private
IP to be NAT/PAT'ed out the port with the single IP & the people with
public IPs to go out the port with the /24 subnet/

I have a Cisco 3640 router connected to a 2950 switch.

Fa0/0 and S0/0 are used for the two ISPs, Fa0/1 is my trunk port with
sub-ints to my switch for VLAN routing, so I have Fa0/1.10, .20, .30,
etc...

Now, where do I place my: ip policy route-map?

On Fa0/1 or on each Fa0/1.nn?

Thanks! I have never used route maps before...


Network Magic Graduation 20% off animated banner
Posted by Merv on November 13, 2005, 7:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

policy-based routing is enabled on router ingress interfaces


Posted by darktiger on November 13, 2005, 7:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Ingress interfaces would be Fa0/0 and S0/0 which are connected to my
ISP's, correct?


Posted by Maarten Carels on November 14, 2005, 4:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Ingress interfaces would be Fa0/0 and S0/0 which are connected to my
> ISP's, correct?
No, Ingress means where the traffic to be policy routed origins from.
So your Fa0/1.* (all of them)

(If you think what policy routing does, it makes sense).

--maarten

Posted by Merv on November 14, 2005, 7:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You would place the policy on the routers FA0/1.n which are the ingress
interfaces for your outbound traffic to your ISP's.


Similar ThreadsPosted
policy based routing for multiple tracking options question April 9, 2006, 8:42 pm
Policy Based Routing April 6, 2005, 9:20 am
PIX 7.0 policy based routing? October 24, 2005, 10:27 pm
policy based routing November 4, 2005, 2:14 am
Policy based routing on a ASA February 2, 2007, 5:03 pm
PIX 525, I think I need Policy-based routing?? April 23, 2007, 9:45 pm
Policy based routing April 30, 2008, 11:30 am
Policy Based Routing and/or NAT May 7, 2008, 8:15 am
policy based routing problem March 22, 2005, 11:03 am
HSRP and Policy based Routing October 26, 2005, 9:12 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map