无。
现场一台S10506的交换机,在vlan虚接口配置策略路由提示不支持。提示如下:
[S10506-Vlan-interface100]ip policy-based-route fw
The operation is not supported in chassis 2 slot 0.
The operation is not supported in chassis 1 slot 1.
The operation is not supported in chassis 1 slot 0.
The operation is not supported in chassis 2 slot 1.
一、现场配置的策略路由如下:
policy-based-route fw permit node 1
if-match acl 3010
apply next-hop 10.10.26.2
#
acl advanced 3010
description GLQ-CS_SJ
rule 0 permit ip destination object-group GL-CS_SJ
#
object-group ip address GL-CS_SJ
1 network subnet 192.168.55.0 255.255.255.0
10 network subnet 192.168.50.0 255.255.255.0
20 network subnet 192.168.51.0 255.255.255.0
30 network subnet 192.168.52.0 255.255.255.0
40 network subnet 192.168.53.0 255.255.255.0
50 network subnet 192.168.54.0 255.255.255.0
60 network subnet 192.168.60.0 255.255.255.0
70 network subnet 192.168.61.0 255.255.255.0
80 network subnet 192.168.62.0 255.255.255.0
90 network subnet 192.168.63.0 255.255.255.0
100 network subnet 192.168.5.0 255.255.255.0
110 network host address 192.168.100.60
120 network host address 192.168.200.60
130 network subnet 192.168.30.0 255.255.255.0
140 network subnet 192.168.31.0 255.255.255.0
#
二、查看设备的acl资源,查看acl资源是充足的。
[S10506]dis qos-acl resource
Interfaces: XGE1/0/0/1 to XGE1/0/0/4 (chassis 1 slot 0)
---------------------------------------------------------------------
Type Total Reserved Configured Remaining Usage
---------------------------------------------------------------------
VFP ACL 2048 1024 0 1024 50%
IFP ACL 4096 1024 0 3072 25%
IFP Meter 2048 512 0 1536 25%
IFP Counter 2048 512 0 1536 25%
EFP ACL 1024 0 0 1024 0%
EFP Meter 512 0 0 512 0%
EFP Counter 512 0 0 512 0%
Interfaces: XGE1/1/0/1 to XGE1/1/0/48 (chassis 1 slot 1)
---------------------------------------------------------------------
Type Total Reserved Configured Remaining Usage
---------------------------------------------------------------------
VFP ACL 1024 512 0 512 50%
IFP ACL 16384 4096 1 12287 25%
IFP Meter 8192 2048 0 6144 25%
IFP Counter 8192 2048 0 6144 25%
EFP ACL 1024 0 0 1024 0%
EFP Meter 512 0 0 512 0%
EFP Counter 512 0 0 512 0%
Interfaces: XGE2/0/0/1 to XGE2/0/0/4 (chassis 2 slot 0)
---------------------------------------------------------------------
Type Total Reserved Configured Remaining Usage
---------------------------------------------------------------------
VFP ACL 2048 1024 0 1024 50%
IFP ACL 4096 1024 0 3072 25%
IFP Meter 2048 512 0 1536 25%
IFP Counter 2048 512 0 1536 25%
EFP ACL 1024 0 0 1024 0%
EFP Meter 512 0 0 512 0%
EFP Counter 512 0 0 512 0%
Interfaces: XGE2/1/0/1 to XGE2/1/0/48 (chassis 2 slot 1)
---------------------------------------------------------------------
Type Total Reserved Configured Remaining Usage
---------------------------------------------------------------------
VFP ACL 1024 512 0 512 50%
IFP ACL 16384 4096 1 12287 25%
IFP Meter 8192 2048 0 6144 25%
IFP Counter 8192 2048 0 6144 25%
EFP ACL 1024 0 0 1024 0%
EFP Meter 512 0 0 512 0%
EFP Counter 512 0 0 512 0%
三、原因分析
经过确认,现场设备不支持acl匹配地址组的部署。修改为按照正常的acl 添加多个rule 规格匹配相关流量 ,问题解决。并没有报错信息。
现场设备不支持acl匹配地址组的部署。修改为按照正常的acl 添加多个rule 规格匹配相关流量 ,问题解决。
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作