Help in implementing PBR.

fhrozbite · ‎10-26-2014

Hi fellow professionals,

I would like to ask for some help. We have 3 ISP's and implementing PBR. 1 of our ISP has given us WAN IP and successfully able to connect to our other branches. On the other ISP's, it uses a bridged modem, and an L2 eLAN. set ip next-hop command using the WAN IP is easily implemented. I am having trouble using the set interface and set default interface command. When I use the set interface command, debug ip policy says when I perform PING test, packets are not forwarded When is use the set default interface, debug says packets are forwarded but PING test don not show success. Below is my running config for the implementation.

interface FastEthernet0/0
ip address 10.212.203.26 255.255.255.252
speed 100
full-duplex

interface FastEthernet0/1
ip address 172.16.23.2 255.255.255.252
speed 100
full-duplex

interface FastEthernet1/0
ip address 172.16.20.1 255.255.255.0
ip policy route-map POLICY
speed 100
full-duplex

interface FastEthernet2/0
ip address 192.168.1.1 255.255.255.0
speed 100
full-duplex

ip access-list extended BAYANTEL
permit ip 172.16.20.0 0.0.0.255 172.16.28.0 0.0.0.255
permit ip 172.16.20.0 0.0.0.255 172.16.29.0 0.0.0.255
ip access-list extended PLDT
permit ip 172.16.20.0 0.0.0.255 172.16.60.0 0.0.0.255
permit ip 172.16.20.0 0.0.0.255 172.16.19.0 0.0.0.255

route-map POLICY permit 10
match ip address PLDT
set interface FastEthernet0/0
set ip next-hop 10.212.203.25

route-map POLICY permit 20
match ip address BAYANTEL
set default interface FastEthernet0/1

ghostinthenet · ‎10-30-2014

For Ethernet, the "set ip next-hop" action should be used over the "set interface" action. The second one is more suited to point-to-point interfaces and, when used with broadcast media, requires that proxy ARP be supported by the next-hop router. The "set default interface" action won't really do anything as it only takes effect if there is no route for the destination in the routing table.