08-24-2012 10:51 AM - edited 03-04-2019 05:22 PM
Hello,
i've some problems using PBR on BVI. In my lab (layout attached) on RTR3 i've configured:
- BVI with two subinterface (f0/0.10 abd fa0/1.10) with one public IP (BVI10: 1.1.1.4/24) to reach ISP1 router (RTR1)
- int fa0/0.255 subinterface to connect the ISP2 router (RTR2)
Attached to RTR3 f0/1 i've connected an ASA on e0/0 (trunk port) with VLAN10 with public IP 1.1.1.5/24, the e0/5 with VLAN1 connects LAN subnet 192.168.0.0 where i've all my hosts.
The ASA's gw is the BVI 10 on RTR3 and RTR3 points to RTR1 with a static route. In this configuration all it's ok and i'm able to reach internet through RTR1.
Now, i would like to apply PBR on RTR3 to redirect http traffic (for example) to RTR2
i'm trying with:
ip access-list extended al-http-traffic
permit tcp any any eq www
!
route-map RM_PBR permit 20
match ip address al-http-traffic
set ip next-hop 192.168.1.10
and i've:
#sh route-map
route-map RM_PBR, permit, sequence 20
Match clauses:
ip address (access-lists): al-http-traffic
Set clauses:
ip next-hop 192.168.1.10
Policy routing matches: 8711 packets, 605190 bytes
But i'm not able to reach internet..
I think I am missing something... what could be wrong/missing ?
Thank you!
N.
08-28-2012 12:27 AM
Hi,
anyone has ideas about my question ?
thanks,
N
03-04-2014 06:38 AM
i have the same issue , did you find a solution ?
01-13-2018 09:15 PM
You have to apply to both sub-interfaces f0/0.10 and fa0/1.10 like so:
int f0/0.10
encapsulation dot1q 10
ip policy route-map RM_PBR
end
int f0/1.10
encapsulation dot1q 10
ip policy route-map RM_PBR
end
01-14-2018 06:17 AM - edited 01-14-2018 06:21 AM
Hello
I must be missing something here so apologies, but why are you bridging on the rtr for the two lan subnets - Looking at your topology a simple "router on a stick" setup would be applicable?
res
Paul
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: