4.3.2 Verifying Policy-Based Routing

<Structure of this section>

(1) Verifying Policy-Based Routing Groups

The following describes how to check the operation of the policy-based routing group.

Execute the show ip policy command, and then check the VLAN interface number to make sure that information about the access list for which policy-based routing list information has been set is displayed.

Figure 4-6: Result of executing show ip policy command
> show ip policy Date 20XX/01/01 12:00:00 UTC VLAN ID Access List Name/Number Sequence Policy List 10 POLICY_GROUP 10 10

Execute the show access-filter command to check the operation of the access list for which policy-based routing list information has been set. Make sure that the filter information for the specified VLAN interface displays Extended IP access-list:POLICY_GROUP and action policy-list 10, and that the value of the matched packets is incremented.

Figure 4-7: Result of executing show access-filter command
> show access-filter interface vlan 10 POLICY_GROUP in Date 20XX/01/01 12:00:00 UTC Using Interface:vlan 10 in Extended IP access-list:POLICY_GROUP remark "permit Policy Group policy" permit tcp(6) any any action policy-list 10 matched packets : 74699826 permit ip any any matched packets : 264176 implicitly denied packets: 0

Figure 4-7: Result of executing show access-filter command

> show access-filter interface vlan 10 POLICY_GROUP in
Date 20XX/01/01 12:00:00 UTC
Using Interface:vlan 10 in
Extended IP access-list:POLICY_GROUP
      remark "permit Policy Group policy"
      permit tcp(6) any any action policy-list 10
         matched packets       :  74699826
      permit ip any any
         matched packets       :    264176
      implicitly denied packets:         0

Execute the show ip cache policy command to check the route selected in the policy-based routing list information. Make sure that all routes configured in the specified policy-based routing list information are displayed, and that the selected route is displayed with *>.

Figure 4-8: Result of executing show ip cache policy command. (Checking routes in standalone mode)
> show ip cache policy 10 Date 20XX/01/01 12:00:00 UTC Policy Base Routing Default Init Interval : 200 Start Time : 20XX/01/01 00:00:00 End Time : 20XX/01/01 00:03:20 Policy Base Routing List : 10 Default : Permit Recover : On Priority Sequence VLAN ID Status Next Hop Track Object ID *> 1 10 100 Up 192.168.1.1 - 2 20 200 Up 192.168.2.1 -

Figure 4-8: Result of executing show ip cache policy command. (Checking routes in standalone mode)

> show ip cache policy 10
Date 20XX/01/01 12:00:00 UTC
Policy Base Routing Default Init Interval :  200
   Start Time : 20XX/01/01 00:00:00
   End Time   : 20XX/01/01 00:03:20
Policy Base Routing List :  10
   Default : Permit
   Recover : On
   Priority    Sequence  VLAN ID  Status  Next Hop         Track Object ID
 *>       1          10      100  Up      192.168.1.1                    -
          2          20      200  Up      192.168.2.1                    -

Figure 4-9: Result of executing show ip cache policy command. (Checking routes in the stack.)
> show ip cache policy 10 Date 20XX/01/01 12:00:00 UTC Policy Base Routing Default Init Interval : 200 Start Time : 20XX/01/01 00:00:00 End Time : 20XX/01/01 00:03:20 Policy Base Routing Default Aging Interval : 200 Start Time : 20XX/01/01 01:00:00 End Time : 20XX/01/01 01:03:20 Policy Base Routing List : 10 Default : Permit Recover : On Priority Sequence VLAN ID Status Next Hop Track Object ID *> 1 10 100 Up 192.168.1.1 - 2 20 200 Up 192.168.2.1 -

Figure 4-9: Result of executing show ip cache policy command. (Checking routes in the stack.)

> show ip cache policy 10
Date 20XX/01/01 12:00:00 UTC
Policy Base Routing Default Init Interval :  200
   Start Time : 20XX/01/01 00:00:00
   End Time   : 20XX/01/01 00:03:20
Policy Base Routing Default Aging Interval :  200
   Start Time : 20XX/01/01 01:00:00
   End Time   : 20XX/01/01 01:03:20
Policy Base Routing List :  10
   Default : Permit
   Recover : On
   Priority    Sequence  VLAN ID  Status  Next Hop         Track Object ID
 *>       1          10      100  Up      192.168.1.1                    -
          2          20      200  Up      192.168.2.1                    -

(2) Checking path switchback operation

Execute the show ip cache policy command to check the path switch-back operation set in the policy-based routing list information.

Figure 4-10: Result of executing show ip cache policy command. (Checking path switchback operation)
> show ip cache policy 10 Date 20XX/01/01 12:00:00 UTC Policy Base Routing Default Init Interval : 200 Start Time : 20XX/01/01 00:00:00 End Time : 20XX/01/01 00:03:20 Policy Base Routing List : 10 Default : Permit Recover : Off ..1 Priority Sequence VLAN ID Status Next Hop Track Object ID *> 1 10 100 Up 192.168.1.1 - 2 20 200 Up 192.168.2.1 -

Figure 4-10: Result of executing show ip cache policy command. (Checking path switchback operation)

> show ip cache policy 10
Date 20XX/01/01 12:00:00 UTC
Policy Base Routing Default Init Interval :  200
   Start Time : 20XX/01/01 00:00:00
   End Time   : 20XX/01/01 00:03:20
Policy Base Routing List :  10
   Default : Permit
   Recover : Off                                                          ..1
   Priority    Sequence  VLAN ID  Status  Next Hop         Track Object ID
 *>       1          10      100  Up      192.168.1.1                    -
          2          20      200  Up      192.168.2.1                    -

If Recover : Off is displayed, the path switch-back operation is set to Do not switch back.

(3) Checking the tracking function

The following describes how to check the tracking functionality operation.

Execute the show track-object command to display the track state. See the information below State to check the track state of each track.

Figure 4-11: Result of executing show track-object command
> show track-object Date 20XX/01/01 12:00:00 UTC Track State Type Target 101 UP(Active) ICMP 172.16.1.1 102 UP(Transit) ICMP 172.16.2.1 201 DOWN(Transit) ICMP 172.16.3.1 >

Execute the show track-object command with a rack ID specified to display detailed track information about the specified track. See the information under State to check the track state. See the information under Last Change to check the time when the track state changed.

Figure 4-12: Result of executing show track-object command. (Track ID specification)
> show track-object 101 Date 20XX/01/01 12:00:00 UTC Track: 101 State: UP(Active), Last Change: 20XX/12/30 18:11:23 Type: ICMP Destination: 172.16.1.1 Source: 172.16.1.100, Nexthop: 172.16.1.200 TOS: max-reliability(2), Precedence: flash(3) Interval: 6sec, Timeout: 2sec >

Figure 4-12: Result of executing show track-object command. (Track ID specification)

> show track-object 101
Date 20XX/01/01 12:00:00 UTC
Track: 101
   State: UP(Active),   Last Change: 20XX/12/30 18:11:23
   Type: ICMP
      Destination: 172.16.1.1
      Source: 172.16.1.100, Nexthop: 172.16.1.200
      TOS: max-reliability(2), Precedence: flash(3)
      Interval: 6sec, Timeout: 2sec
>