[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cisco-nsp
Subject:    [c-nsp] ASR9K ABF
From:       Mohammad Khalil <eng_mssk () hotmail ! com>
Date:       2016-09-18 9:16:08
Message-ID: AM3PR04MB15052EA331B229DB881943FEFAF50 () AM3PR04MB1505 ! eurprd04 ! prod ! outlook ! com
[Download RAW message or body]

Hi all

I have a question regarding ABF setup on ASR9K

Should the ACL applied on an interface defines an IP range different than the IP \
address configured on the input interface?

For example:

ipv4 access-list ABF
10 permit ipv4 192.168.199.0/24 any nexthop1 vrf INSIDE-1 ipv4 9.9.9.2 nexthop2 vrf \
INSIDE-1-BACKUP ipv4 19.19.19.2 20 permit ipv4 any any

Now , the ingress interface is configured as below:

interface GigabitEthernet0/0/0/9
description Inside_Traffic
ipv4 address 192.168.199.1 255.255.255.0
ipv4 access-group ISM_ABF ingress


The ACL is not working , the IP address configured under the interface matches the IP \
address inside the ACL , could that be the reason for this not to work?


Thanks


BR,

Mohammad
_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[prev in list] [next in list] [prev in thread] [next in thread]