Cisco WS-C6506 Software Manual page 495

Chapter 15 Configuring Access Control
Sun Workstation
When using PBF to enable forwarding between two VLANs with the Sun Workstation end hosts, note
these limitations when configuring the hosts:
•
•
If the number of hosts increase, you need to set the host route entries for each destination host. You can
set up a startup file in /etc/rc2.d that has the host route entries for each destination host. Setting up this
file prevents you from having to key in all the host route entries after the Sun Workstation is reset or
rebooted.
Entries in the file should use this form:
Route add host <destination Host IP Address> <dummy gateway IP Address>
You need to use the file that contains the host route entries as one of the startup scripts. You can create
the file in a directory that has full permissions for the root/superuser, set a soft link pointing to that file
in /etc/rc2.d, or create the file in the /etc/rc2.d directory.
OL-8978-04
PBF Limitations
PBF does not support ARP; you must set a static ARP entry on each Sun Workstation that
participates in PBF. Each static ARP entry must point to the PBF MAC address that is mapped to
the destination host.
You must also configure the Sun Workstation to have a gateway. If the Sun Workstation needs to
communicate to a different network, you must define the host routes for all networks that go through
PBF, and if required, you must define a default gateway.
For example, if host 10.0.0.1 on VLAN 40 needs to communicate with host 11.0.0.1 on VLAN 50,
and assuming the PBF MAC address is 00-11-11-11-11-11, the static ARP entry would be as
follows:
arp -s 11.0.0.1 00:11:11:11:11:11
where 00-11-11-11-11-11 is the PBF MAC address, and 11.0.0.1 is the IP address of the destination
host.
Sun Workstation Limitations
Sun Workstations do not allow you to set a static ARP entry if the destination is part of a different
network (11.x.x.x in this example). This is an ARP limitation in all Sun Workstations. To overcome
this problem, you need to define a dummy gateway, which is a host route, and set a static ARP entry
pointing to the PBF MAC address that is mapped to the destination host.
Using the example above, you need to first define a dummy static ARP entry for the gateway. The
IP address of the gateway is one of the host addresses within that network as follows:
(A) Kubera# arp -s 10.0.0.2
(B) Kubera# route add host
You need to set only one dummy ARP entry for PBF-related traffic and the host routes for each
destination host.
00:11:11:11:11:11
11.0.0.1 10.0.0.2
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring Policy-Based Forwarding
15-99