Policy Based Traffic split - VLANs

Mario Manzano · ‎11-15-2013

Hello Everyone!

We have the need to split traffic for a specific VLAN out one interface that has DSL on it. We are currently connected through MPLS to the site, but over there, we have to route VLAN 204 out the other way.

I am unsure on how to acomplish this swiftly and without hiccups on the network.

I know the access list needs to be created for that IP

access-list 204 permit 24

match ip address 10.71.204.0 http

match ip address 10.71.204.0 https

Also, the route map needs to be created

route-map InternetATT permit 100

match ip address 204

set interface Dialer1

Then I am unsure as to where to apply the PBR ... Gi0/0 or Gi0/0.1?

This DSL is through a modem in bridge mode. Attached directly to Gi0/1 and we have ONE static IP address which the modem registers with at logon.

I am also unsure about NATing this traffic. We do need to protect it and have the security license to do so. See attached router config for more details.

I've never attempted this, so any help in the right direcction is much appreciated!

Have a nice day!

cadet alain · ‎11-15-2013

Hi,

PBR is an inbound feature so apply on the interface where the traffic to policy routed ingresses.

Concerning NAT, if you NAT traffic out 2 interfaces then you must use route-maps in your NAT statement that matches both source subnet and outgoing interface.

Regards

Alain

Don't forget to rate helpful posts.