Hi,
I have a problem with an quite old SummitX450 (rev0) Core Switch with EXOS 12.4.1.7
Here's the deal:
I have 2 vlan networks (510 and 520) connected to this switch. Both have an IP and serve as Gateway for the clients of VLAN 520 to reach clients and services of VLAN 510 and vice versa.
VLAN 520 = 192.168.211.0/24 (Summit = 192.168.211.252)
VLAN 510 = 172.24.0.0/16 (Summit = 172.24.252.252)
Now I want a single IP of VLAN 520 to be routed over a IDS/IPS Router
Router IDS/IPS VLAN 510 = 172.24.252.203/16
Router IDS/IPS VLAN 520 = 192.168.211.47/24
Destination IP_VLAN520 is 192.168.211.29
I achivied the same in another network with Cisco Routers by adding a /32 route with the specific IP
So:
configure iproute add 192.168.211.29/32 172.24.252.203
show iproute 192.168.211.29 255.255.255.0
Ori Destination Gateway Mtr Flags VLAN Duration
#d 192.168.211.0/24 192.168.211.250 1 U------um--f PRODUKTION1 7d:2h:59m:41s
#s 192.168.211.29/32 172.24.252.203 1 UG---S-um--f OFFICE 0d:1h:13m:24s
Origin(Ori): (b) BlackHole, (be) EBGP, (bg) BGP, (bi) IBGP, (bo) BOOTP
(ct) CBT, (d) Direct, (df) DownIF, (dv) DVMRP, (e1) ISISL1Ext
(e2) ISISL2Ext, (h) Hardcoded, (i) ICMP, (i1) ISISL1 (i2) ISISL2
(is) ISIS, (mb) MBGP, (mbe) MBGPExt, (mbi) MBGPInter, (mp) MPLS Lsp
(mo) MOSPF (o) OSPF, (o1) OSPFExt1, (o2) OSPFExt2
(oa) OSPFIntra, (oe) OSPFAsExt, (or) OSPFInter, (pd) PIM-DM, (ps) PIM-SM
(r) RIP, (ra) RtAdvrt, (s) Static, (sv) SLB_VIP, (un) UnKnown
(*) Preferred unicast route (@) Preferred multicast route
(#) Preferred unicast and multicast route
Flags: (B) BlackHole, (D) Dynamic, (G) Gateway, (H) Host Route
(L) Matching LDP LSP, (l) Calculated LDP LSP, (m) Multicast
(P) LPM-routing, (R) Modified, (S) Static, (s) Static LSP
(T) Matching RSVP-TE LSP, (t) Calculated RSVP-TE LSP, (u) Unicast, (U) Up
(f) Provided to FIB (c) Compressed Route
Mask distribution:
1 routes at length 24 1 routes at length 32
Route Origin distribution:
1 routes from Direct 1 routes from Static
Total number of routes = 2
Total number of compressed routes = 0
if I tracert from a client in VLAN 510 to the specific VLAN520 client I see that the Summit routes directly to the client.
tracert -h 3 192.168.211.29
Routenverfolgung zu 192.168.211.29 über maximal 3 Hops
1 <1 ms <1 ms <1 ms 172.24.252.250
2 1 ms 1 ms 1 ms 192.168.211.29
Ablaufverfolgung beendet.
I've seen the priority route list:
show iproute priority
Direct 10
MPLS 20
Blackhole 50
Static 1100
means... direct routes always go over static routes...
what can I do that my static routes gets prioritized? The lowest priority for static routes to be set is 11 - which will be over the 10 of Direct routes..
any help is appreciated
Thanks in advance
