CEF和PBR冲突的问题
情况1:
Rack01R1#sh route-map maple
route-map maple, permit, sequence 10
Match clauses:
ip address (access-lists): 101
Set clauses:
interface Serial0
Policy routing matches: 18 packets, 1080 bytes
此时,PBR作用大于CEF
DEBUG信息如下:
00:39:34: IP: s=10.0.0 .4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
情况2:
Rack01R1#sh route-map
route-map maple, permit, sequence 10
Match clauses:
ip address (access-lists): 101
Set clauses:
ip next-hop 192.168.12.2
Policy routing matches: 39 packets, 2340 bytes
此时,CEF作用大于PBR
DEBUG信息如下:
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:04: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal forwarding
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:04: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal forwarding
00:40:07: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:07: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:07: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal
第二种情况测试TUNNEL时一样,但是有时会出现无法转发的情况,为什么呢?
Rack01R1#sh route-map maple
route-map maple, permit, sequence 10
Match clauses:
ip address (access-lists): 101
Set clauses:
interface Serial0
Policy routing matches: 18 packets, 1080 bytes
此时,PBR作用大于CEF
DEBUG信息如下:
00:39:34: IP: s=
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
情况2:
Rack01R1#sh route-map
route-map maple, permit, sequence 10
Match clauses:
ip address (access-lists): 101
Set clauses:
ip next-hop 192.168.12.2
Policy routing matches: 39 packets, 2340 bytes
此时,CEF作用大于PBR
DEBUG信息如下:
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:04: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal forwarding
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:04: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal forwarding
00:40:07: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:07: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:07: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal
第二种情况测试TUNNEL时一样,但是有时会出现无法转发的情况,为什么呢?
使用pbr,必须在接口上禁止cef功能
pbr的所有包必须cpu来处理
cef而是靠cache表来。。。
浙公网安备 33010602011771号