Mr.Chan

导航

CEF和PBR冲突的问题

  情况1
Rack01R1#sh route-map maple
route-map maple, permit, sequence 10
Match clauses:
ip address (access-lists): 101
Set clauses:
interface Serial0
Policy routing matches: 18 packets, 1080 bytes
此时,PBR作用大于CEF

DEBUG
信息如下:
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:39:34: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3 (Serial0), len 28, FIB policy routed

情况2
Rack01R1#sh route-map
route-map maple, permit, sequence 10
Match clauses:
ip address (access-lists): 101
Set clauses:
ip next-hop 192.168.12.2
Policy routing matches: 39 packets, 2340 bytes
此时,CEF作用大于PBR

DEBUG
信息如下:
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:04: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal forwarding
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:04: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:04: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal forwarding
00:40:07: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy match
00:40:07: CEF-IP-POLICY: fib for address 192.168.12.2 is with flag 0
00:40:07: IP: s=10.0.0.4 (Ethernet0), d=3.3.3.3, len 28, FIB policy rejected - normal



第二种情况测试TUNNEL时一样,但是有时会出现无法转发的情况,为什么呢?

 

 

使用pbr,必须在接口上禁止cef功能
pbr
的所有包必须cpu来处理
cef
而是靠cache表来。。。

posted on 2005-05-29 16:12  cunshen  阅读(721)  评论(0)    收藏  举报