Hi Hank,

I use ABF to take traffic out of a GRE tunnel and forward out a physical interface, so I would imagine the reverse may work.

--
Devon

Hank Nussbacher <mailto:h...@efes.iucc.ac.il>
November 2, 2015 at 3:25 PM
At 14:40 02/11/2015 -0500, Chuck Church wrote:

Perhaps ABF:
http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r3-9-1/general/release/notes/rlse_a9k_392.html#wp433672

ipv4 access-list security-abf-acl
10 permit ipv4 any any nexthop 40.1.1.2
! where 40.1.1.2 is the tunnel interface IP

interface gi 0/0/0/1
ipv4 access-group security-abf-acl ingress

would this work?

-Hank


_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Hank Nussbacher <mailto:h...@efes.iucc.ac.il>
November 2, 2015 at 2:18 PM
I am looking for a simple solution on IOS-XR where each and every pkt that comes out of a specific interface (Gi0/1) would be auto-fwded into tunnel0 (uni-directional only). No routing decisions, no BGP lookup, no static routing, no FIB, no RIB, just some sort of auto-fwd rule which would bypass the router entirely. Possible?

Thanks,
Hank

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Hank Nussbacher <mailto:h...@efes.iucc.ac.il>
November 2, 2015 at 2:18 PM
I am looking for a simple solution on IOS-XR where each and every pkt that comes out of a specific interface (Gi0/1) would be auto-fwded into tunnel0 (uni-directional only). No routing decisions, no BGP lookup, no static routing, no FIB, no RIB, just some sort of auto-fwd rule which would bypass the router entirely. Possible?

Thanks,
Hank

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to