topic PBR on Cisco WS-C3850-48T L3 switch performance impact? in Network Security

PBR on Cisco WS-C3850-48T L3 switch performance impact?

satish.txt1 — Tue, 12 Mar 2019 07:19:36 GMT

We have Cisco WS-C3850-48T L3 switch and i am going to configure PBR on it, does anyone know what could be the impact? If i apply policy to specific interface then PBR will only apply on that specific interface traffic right? it won't apply on global switch traffic.

We are only planning for 2 PBR policy, any one has any past experience doing PBR on L3 switch and performance penalty?

Most likely, it will do you

Philip D'Ath — Thu, 18 Feb 2016 05:46:02 GMT

Most likely, it will do you PBR at line rate. Hard to say for certain without knowing the exact PBR configuration.

Very basic PBR.

satish.txt1 — Thu, 18 Feb 2016 18:30:14 GMT

Very basic PBR.

We have two ISP link on L3 switch and want to route Host-A to A ISP and Host-B to B ISP. very basic PBR.

Do the PBR on the L3 switch

Philip D'Ath — Thu, 18 Feb 2016 18:33:56 GMT

Do the PBR on the L3 switch then.

My only concern is

satish.txt1 — Thu, 18 Feb 2016 20:23:17 GMT

My only concern is performance impact, we have almost 1G internet pipe, and around ~100 servers.

You have to just try it and

Jon Marshall — Fri, 19 Feb 2016 00:27:25 GMT

You have to just try it and see.

PBR on L3 switches can be hit and miss and you should make sure you read the configuration guidelines for your particular switch model.

There are always restrictions and more importantly things you should not do because it will cause packets to be processed switched ie. in software and with the size of your internet connection and number of users you don't want that.

These restrictions and recommendations will be listed in the switch configuration guide.

Use the default route where you can ie. don't do PBR on both links because you don't need to, only do PBR for traffic you do not want to send via the default route.

Jon

I was reading somewhere it

satish.txt1 — Fri, 19 Feb 2016 13:28:51 GMT

I was reading somewhere it was saying following:

In Cisco IOS XE Release 3.2SE, support was added for the Cisco Catalyst 3850 Series Switches.

I have following version, what is XE Release?????

Image: Software: CAT3K_CAA-UNIVERSALK9-M, 03.03.02SE RELEASE SOFTWARE (fc2)

You are running 3.3.2. So

Philip D'Ath — Fri, 19 Feb 2016 13:35:01 GMT

You are running 3.3.2. So you have the needed support.

I would recommend upgrading to 3.6.3E before you do anything. Some of those earlier versions were a bit flaky.