I want to keep inter-VLAN routing on the switch (about 10 vlans with L3 routing) and for some VLANs I need different gateway.
I tried to run PBR on incoming vlan.
ip address 10.10.10.1 255.255.255.128
ip policy route-map test
ip address 10.10.10.129 255.255.255.128
ip address 126.96.36.199 255.255.255.252
access-list 111 permit ip 10.10.10.0 0.0.0.127 any
route-map test permit 10
match ip address 111
set ip next-hop 188.8.131.52
In this scenerio all packets from vlan 10 are policy routed to 184.108.40.206. even traffic to vlan11.
I want policy routing for packets that aren't in local routing table.
Cisco recommended that cannot match ACLs with deny ACEs.
* The switch does not support route-map deny statements for PBR
* When configuring match criteria in a route map, follow these guidelines:
– Do not match ACLs that permit packets destined for a local address. PBR would forward these packets, which could cause ping or Telnet failure or route protocol flapping.
– Do not match ACLs with deny ACEs. Packets that match a deny ACE are sent to the CPU, which could cause high CPU utilization.