topic Re: PBR not working while using Eigrp in Routing and SD-WAN

PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 16:40:50 GMT

Hi Community,

I want to configure PBR for LAN subnet as when any of the user initiate the traffic for server packet should go to the ISP-2

e.g 192.168.40.20 destined to 192.168.16.55 it should follow the ISP-2 reaming traffic should follow ISP-1

I have configured. PBR but it's not working.

When Iam taking traceroute the traffic is going from ISP-1 for the destinations that i have defined in ACL for route-map

route-map LHRB, permit, sequence 10
Match clauses:
ip address (access-lists): LHRB
Set clauses:
ip next-hop verify-availability 172.16.3.69 10 track 1 [undefined]
ip next-hop 172.16.3.69
Policy routing matches: 0 packets, 0 bytes

Extended IP access list LHRB
10 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.11
20 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.72
30 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.77

sh ip policy

Interface Route map
Gi0/0 LHRB

LHRB-RTR#sh ip eigrp neighbors
EIGRP-IPv4 Neighbors for AS(100)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 172.16.3.69 Tu310 14 00:00:29 56 1470 0 27711
0 172.16.1.69 Tu110 13 03:45:57 40 1470 0 39005

H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 172.16.3.69 Tu310 14 00:00:29 56 1470 0 27711
0 172.16.1.69 Tu110 13 03:45:57 40 1470 0 39005

Re: PBR not working while using Eigrp

David Ruess — Fri, 29 Mar 2024 19:00:24 GMT

Hello,

If you need traffic destined to the Server IP you mentioned of 192.168.16.55 the you need to include it in your ACL, otherwise it wont be affected by your PBR.

When you test it again can you share the output of the command: debug ip policy

-David

Re: PBR not working while using Eigrp

balaji.bandi — Fri, 29 Mar 2024 19:10:35 GMT

The output not clear to me - can you post complete configuration where you doing this PBR

below example should work - again need to test in your environment :

ip access-list extended MYPBR
permit ip host 192.168.40.20 host 192.168.16.55

route-map MAPPBR permit 10
match ip address MYPBR
set ip next-hop ISPX

interface x/x
ip policy route-map MAPPBR

still not working you need to post the configuration.

Re: PBR not working while using Eigrp

MHM Cisco World — Fri, 29 Mar 2024 19:22:39 GMT

It seem to me (not 100% sure) pbr config is correct' but the test is wrong

If you want to test pbr you must do test in point behind router you config pbr on it not in router itself'

If you want to test any pbr from router you need to use local pbr.

MHM

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 19:26:20 GMT

Sorry I have just paste three IP's 16.55 is also included in ACL. when iam doing debug ip policy I cannot see any logs or policy that match

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 19:28:44 GMT

I have configured GRE tunnel with My aggregation and iam set ip next-hop the IP of tunnel configured on aggregation site.

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 19:31:39 GMT

@MHM Cisco World I also taken trace from one of the LAN user the packet is going from the ISP-1

Re: PBR not working while using Eigrp

balaji.bandi — Fri, 29 Mar 2024 19:36:52 GMT

still not working you need to post the configuration.

Re: PBR not working while using Eigrp

MHM Cisco World — Fri, 29 Mar 2024 19:37:12 GMT

Show ip access-list <<- share this

MHM

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 19:41:20 GMT

Extended IP access list LHRB
10 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.11
20 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.72
30 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.77
40 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.45
50 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.55
60 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.158
70 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.76
80 permit ip 192.168.40.0 0.0.0.255 host 192.168.16.252

route-map LHR, permit, sequence 10
Match clauses:
ip address (access-lists): LHRB
Set clauses:
ip next-hop verify-availability 172.16.3.69 10 track 1 [undefined]
ip next-hop 172.16.3.69
Policy routing matches: 439 packets, 70225 bytes

Interface Route map
Gi0/0 LHRB

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 19:42:22 GMT

Re: PBR not working while using Eigrp

David Ruess — Fri, 29 Mar 2024 19:57:22 GMT

Your track 1 shows undefined. Have you configured a track? Can you show that as well. YOur track state needs to be up for the PBR to work

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 19:59:57 GMT

We can't do without track?

Re: PBR not working while using Eigrp

MHM Cisco World — Fri, 29 Mar 2024 20:01:00 GMT

Policy routing matches: 439 packets, 70225 bytes

This meaning that traffic now hit pbr and must route via next-hop you use

show track

MHM

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 20:02:57 GMT

Yes but when Iam taking trace it is still going from ISP-1

Re: PBR not working while using Eigrp

MHM Cisco World — Fri, 29 Mar 2024 20:10:41 GMT

Track use for route-map need config ip sla' did you config any ip sla?

MHM

Re: PBR not working while using Eigrp

David Ruess — Fri, 29 Mar 2024 20:38:10 GMT

Yes you configured a track on your PBR. So you need to configure the respective tracking object of what you are tracking in global config. If the track is down or not associated to anything then it wont work.

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 20:46:22 GMT

route-map LHRB, permit, sequence 10
Match clauses:
ip address (access-lists): LHRB
Set clauses:
ip next-hop verify-availability 172.16.3.69 1 track 1 [down]
Policy routing matches: 439 packets, 70225 bytes

Track 1
IP SLA 1 reachability
Reachability is Down
1 change, last change 12:10:11
Latest operation return code: Timeout
Tracked by:
Route Map 0

track 1 ip sla 1 reachability
ip sla 1
icmp-echo 192.168.3.69
frequency 10
ip sla schedule 1 life forever start-time now

Re: PBR not working while using Eigrp

David Ruess — Fri, 29 Mar 2024 20:59:11 GMT

There is likely your problem as I stated. Your tracked reachability is down. This needs to be in the up state to have your PBR work correctly. You need a valid UP and reachable IP address to bring up this SLA/Tracked object.

Re: PBR not working while using Eigrp

Syedalishah — Fri, 29 Mar 2024 21:00:15 GMT

yes configured but still showing me in down state