PolicyRoutingwithCatalyst3550SeriesSwitchConfigurationExampleDownloadsPolicyRoutingwithCatalyst3550SeriesSwitchConfigurationExampleDocumentID:47900ContentsIntroductionPrerequisitesRequirementsComponentsUsedConventionsConfigureNetworkDiagramConfigurationsVerifyTroubleshootTroubleshootingCommandsNetProDiscussionForums-FeaturedConversationsRelatedInformationIntroductionThisdocumentprovidesasampleconfigurationforpolicyroutingonCatalyst3550seriesswitches.YoumustmodifytheSwitchDatabaseManagement(SDM)templatetoenabletheswitchtosupportthe144-bitLayer3TernaryContentAddressableMemory(TCAM)beforeyoucanconfigurepolicyrouting.RefertoUnderstandandConfiguretheSwitchingDatabaseManageronCatalyst3550SeriesSwitchesmoreinformationaboutSDM.Note:TheCatalyst3550haslimitationsontheroute-mapscommandsyoucanuse.PrerequisitesRequirementsBeforeattemptingthisconfiguration,ensurethatyouareknowledgeableofthese:ConfiguringPolicy-BasedRouting?UnsupportedRouteMapCommands?OverviewoftheSwitchingDatabaseManagerComponentsUsedTheinformationinthisdocumentisbasedonthesesoftwareandhardwareversions:?CiscoIOSSoftwareRelease12.1.19-EA1a?CiscoCatalyst3550Theinformationinthisdocumentwascreatedfromthedevicesinaspecificlabenvironment.Allofthedevicesusedinthisdocumentstartedwithacleared(default)configuration.Ifyournetworkislive,makesurethatyouunderstandthepotentialimpactofanycommand.ConventionsFormoreinformationondocumentconventions,refertoCiscoTechnicalTipsConventions.ConfigureInthissection,youarepresentedwiththeinformationtoconfigurethefeaturesdescribedinthisdocument.Note:Tofindadditionalinformationonthecommandsusedinthisdocument,usetheCommandLookupTool(registeredcustomersonly)Beforeyoucanenablepolicyrouting,youmustconfigureoneofthesecommandsintheglobalconfigurationmode,andthentheconfigurationmustbewrittenandtheswitchreloaded:sdmpreferextended-match?sdmpreferaccessextended-match?sdmpreferroutingextended-matchCAT3550(config)#access-list10permit55CAT3550(config)#route-mappbrpermit10CAT3550(config-route-map)#matchipaddress10CAT3550(config-route-map)#setipnext-hop2CAT3550(config)#intvlan3CAT3550(config-if)#ippolicyroute-mappbrCAT3550(config-if)#06:12:31:%L3TCAM-3-SIZE_CONFLICT:PBRrequiresenablingextendedroutingCAT3550#showrunintvlan3Buildingconfiguration...Currentconfiguration:60bytes!interfaceVlan3ipaddress[color="#0000ff"]!---Commandnottaken-youneedtoenableSDM.endCAT3550#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.CAT3550(config)#sdmpreferextended-matchChangestotherunningSDMpreferenceshavebeenstored,butcannottakeeffectuntilthenextreload.Use'showsdmprefer'toseewhatSDMpreferenceiscurrentlyactive.CAT3550(config)#endCAT3550#write06:14:11:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleBuildingconfiguration...[OK]ltd-1-2#reloadProceedwithreload?[confirm]Youshouldbeawareofunsupportedcommands—refertoUnsupportedRouteMapCommandsifthisconfigurationexists:access-list10permit55route-mappbrpermit10matchipaddress10

setipdefaultnext-hop2Anerrormessageisgeneratedifyoutrytoconfigurethepolicyroutemapontheinterface:CAT3550(config)#intvlan3CAT3550(config-if)#ippolicyroute-mappbrCAT3550(config-if)#endCAT3550#00:02:29:%PBR-3-UNSUPPORTED_RMAP:Route-mappbrnotsupportedforPolicy-BasedRoutingNetworkDiagramThisdocumentusesthisnetworksetup:EthO/O10.10.1□'.'■2/24VLAN110.10.10.V24catseeoVLAN220.20.20.V24.VLAN330.30.30.V24EthO/OcatseeoVLAN220.20.20.V24.VLAN330.30.30.V24EthO/OWorkstationAEO/24ConfigurationsThisdocumentusesthisconfiguration:CAT3550Theconfigurationtakestrafficsourcefrom20.20.20.X(access-list10)andsendsitto—theconfigurationoverridesthedefaultgatewaysetto.CAT3550(CiscoCatalyst3550)CAT3550#showrunning-configBuildingerfaceVlan1ipaddress!interfaceVlan2ipaddressippolicyroute-mappbr!interfaceVlan3ipaddress!iprouteipclasslessiphttpserveraccess-list10permit55route-mappbrpermit10matchipaddress10setipnext-hopendVerifyThereiscurrentlynoverificationprocedureavailableforthisconfiguration.TroubleshootThissectionprovidesinformationyoucanusetotroubleshootyourconfiguration.TroubleshootingCommandsCertainshowcommandsaresupportedbytheOutputInterpreterTool(registeredcustomersonly),whichallowsyoutoviewananalysisofshowcommandoutput.Note:Beforeissuingdebugcommands,refertoImportantInformationonDebugCommands.debugippolicy—Showspacketsthatare'policyrouted'or'policyrejected'.Anexampleofthedebugippolicycommandoutputis:*Dec513:33:23.607:IP:s=(Vlan2),d=,len100,policymatch*Dec513:33:23.607:IP:routemappbr,item10,permit*Dec513:33:23.607:IP:s=(Vlan2),d=(Vlan3),len100,policyrouted*Dec513:33:23.607:IP:Vlan2toVlan3*Dec513:33:23.707:IP:s=(Vlan2),d=,len100,policymatch*Dec513: