Cisco Catalyst 4500 基於策略的路由

為了測試我剛剛設置的新防火牆，我正在嘗試在我們的核心交換機上實施基於策略的路由。我希望將來自某些 vlan 的流量路由到新防火牆，而其他所有內容繼續通過舊防火牆路由。我試圖使用本指南。該指南中的所有內容都可以正常工作，除了嘗試在介面配置模式下執行“ip policy route-map”命令。IOS 告訴我這樣的命令不存在。“show ip interface vlan”命令表示策略路由已禁用。有任何想法嗎？

“show ver”的輸出：

Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 12.2(53)SG, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Thu 16-Jul-09 19:49 by prod_rel_team
Image text-base: 0x10000000, data-base: 0x11D1E3CC

ROM: 12.2(31r)SG2
Dagobah Revision 226, Swamp Revision 34

RTTMCB2223-1 uptime is 3 years, 22 weeks, 2 days, 19 hours, 28 minutes
Uptime for this control processor is 51 weeks, 2 days, 18 hours, 2 minutes
System returned to ROM by power-on
System restarted at 19:22:02 UTC Tue Jul 12 2011
System image file is "bootflash:cat4500-ipbasek9-mz.122-53.sg.bin"

...

cisco WS-C4510R (MPC8245) processor (revision 4) with 524288K bytes of memory.
Processor board ID FOX103703W3
MPC8245 CPU at 400Mhz, Supervisor V
Last reset from PowerUp
42 Virtual Ethernet interfaces
244 Gigabit Ethernet interfaces
511K bytes of non-volatile configuration memory.

Configuration register is 0x2

您有一個“IPBASEK9”映像，但需要“ENTERPRISESERVICES”才能使用基於策略的路由；您可能需要 ENTERPRISESERVICESK9，因為原始圖像是加密圖像（K9 後綴）。

請參閱此Catalyst 4500 功能概覽手冊的第 2 頁。

引用自：https://serverfault.com/questions/405490