Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

3560 Policy routing


I'm having a bad time configuring policy based routing on a Cisco 3560.. i've got tons of experience with route-maps on routers, but i've never put one on an SVI before...

since i've had the problems i've mocked this exact scenario up..

the only difference is that its a 3560 and not a 3550.... For some strange reason the only traffic which gets policy routed is broadcast traffic, everything else gets ignored... I cannot work out why,

If I replace the switch with a router, and use the exact same route maps/ACLs/etc but with physical routed interfaces, it works fine....

Any ideas??

  • Other Network Infrastructure Subjects

Re: 3560 Policy routing


there are a number of restrictions for PBR on a 3560, which might apply in your case:

To use PBR, you must first enable the routing template by using the sdm prefer routing global configuration command. PBR is not supported with the VLAN or default template. For more information on the SDM templates, see Chapter 7, "Configuring SDM Templates."

•VRF and PBR are mutually-exclusive on a switch interface. You cannot enable VRF when PBR is enabled on an interface. In contrast, you cannot enable PBR when VRF is enabled on an interface.

•The number of TCAM entries used by PBR depends on the route map itself, the ACLs used, and the order of the ACLs and route-map entries.

•Policy-based routing based on packet length, IP precedence and TOS, set interface, set default next hop, or set default interface are not supported. Policy maps with no valid set actions or with set action set to Don't Fragment are not supported.

From "Configuring Policy-Based Routing"

Regards, Martin

New Member

Re: 3560 Policy routing


Thanks for the reply,

I have configured the switch for sdm routing, (it doesn';t allow route maps to be configured otherwise)

I've read all of this before posting here... and cannot figure out the problem i'm having..

The route-map doesn't match anything other than broadcast traffic for some reason, even if I set the ACL to any any,

and again, if I copy the exact same config to a router, it works fine..

New Member

Re: 3560 Policy routing

I've logged this with a support company, who've looked at what im doing and its simple and fine and should work..

i've observed another strange thing.

When the route-map sets the next hop to the router which is directly connected, (to force traffic) nothing happens and the route-map doesn't work..

If I unplug the interface the route-map is using for its next-hop (the next-hop router)

the route-map starts matching the packets, but denying them to be PBRd because the next hop is null (obviously, I unplugged it)

The moment I plug the interface back in the route-map stops working..

New Member

Re: 3560 Policy routing


I'm having the exact same issue on a 3550. Did you manage to find a solution for this?


New Member

Re: 3560 Policy routing

Hi, if CEF is enabled on the interface you wont be able to policy-route and CEF and policy based routing aren?t supported together.

Well, this is what I glean from this article :-)


New Member

Re: 3560 Policy routing

Hello Guys,

Did you manage to find a solution to this problem. I have noticed the same behavior on my 3560 with PBR. Only the broadcast traffic matched the policy.