No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40 is invalid after configuring the redirection

Publication Date:  2012-07-27 Views:  51 Downloads:  0
Issue Description
Network structure:Internet ---Eth2/0/0 NE40 Eth2/0/15 ---PC
Description
: the line card located slot 2 is LAN board, the VRP version of NE40 is VRP 3.10-0426SP3, the IP-add of the underlying PC is 10.0.0.1, the gateway is 10.0.0.2. re-direct for the network segment 10.0.0.0/24 on NE40, the out interface is Eth2/0/0, the data configuration is:
rule-map intervlan syf ip 10.0.0.0 0.0.0.255 any
flow-action syf redirect ip 192.168.0.2 ethernet 2/0/0 
eacl syf syf syf
access-group switch eacl syf port ethernet 2/0/15 vlan 100
Malfunction
: PC cannot connect Internet, the Internet address is uncommunicated, the re-direction of NE40 is invalid.
Alarm Information
No
Handling Process
According to the above analysis, we should note the following two points:
1
.as the out-interface of redirection is the interface of layer 2 board, we must appoint the valn of the out interface in flow-action.
2
.the destination address accessed by PC, it must find the matching entry in the routing table of NE40 (the next hop cannot be NULL interface).
the correct configuration is:

rule-map intervlan syf ip 10.0.0.0 0.0.0.255 any
flow-action syf redirect ip 192.168.0.2 ethernet 2/0/0 vlan 200
eacl syf syf syf
access-group switch eacl syf port ethernet 2/0/15 vlan 100
ip route 0.0.0.0 0.0.0.0  next-hop IP

Summary: the later version (including VRP 3.10-0426SP3) of NE40/80 supports the condition that the out-interface of route re-direction is any physical interface (layer 2 interface, layer 3 interface or layer 3 sub interface), but notice the above configuration requirements. 
Root Cause

1.as re-directing the packets to layer 2 board interface, we must appoint the vlan of the out interface in flow-action, the correct configuration should be flow-action syf redirect ip 192.168.0.2 ethernet 2/0/0 vlan 200(the vlan that ethernet2/0/0 interface belongs to).
2.
the destination address accessed by PC, it must be able to find the corresponding term in the routing table of NE40. such as the destination address accessed by PC is 172.16.10.1, there is one route in the routing table of NE40, whose destination network segment is 172.16.10.0/24we can configure one static route manually 172.16.10.1

ip route 172.16.10.0 255.255.255.0 loopback 0

note the next hop cannot be Null interface, or configure one default route. Or configure one default route
ip route 0.0.0.0 0.0.0.0  the next-hop IP
 

Suggestions
No

END