POLICY BASED ROUTING Q?

dpugalendi.d — Fri, 21 Feb 2020 12:27:20 GMT

ip access-list extended SECONDARY_TRAFFIC

permit tcp any host 172.255.5.89 eq 3128

permit udp any host 172.255.5.89 eq 3128

deny ip any any log

route-map LINK_2 permit 10

match ip address SECONDARY_TRAFFIC

set interface Tunnel901

interface GigabitEthernet0/0

description LAN INTERFACE

ip address 172.17.77.10 255.255.255.0

ip policy route-map LINK_2

duplex auto

speed auto

In the Policy based Routing , i would like to know , what packets are denied by the access list " Deny ip any any " statement ? ; pls help me

POLICY BASED ROUTING Q?

dpugalendi.d — Mon, 12 Sep 2011 12:50:32 GMT

In the Policy based Routing , i would like to know , what packets are denied by the access list " Deny ip any any " statement ? ; pls help me and when i implement this the access list is blocking some lan to lan packets why ?

ip access-list extended SECONDARY_TRAFFIC
permit tcp any host 172.255.55.89 eq 3333
permit udp any host 172.255.55.89 eq 3333
deny ip any any log

route-map LINK_2 permit 10
match ip address SECONDARY_TRAFFIC
set interface Tunnel901
!
interface GigabitEthernet0/0
description LAN INTERFACE
ip address 172.7.1.10 255.255.255.0
ip policy route-map LINK_2
duplex auto
speed auto

POLICY BASED ROUTING Q?

Richard Burts — Tue, 13 Sep 2011 18:03:22 GMT

The access list is pretty straight forward. It permits traffic to host 172.255.55.89 for port 3333 (both TCP and UDP) and it denies all other traffic.

Perhaps that sounds alarming - that only traffic that is port 3333 to host 172.255.55.89 is permitted and all other is denied. But bear in mind that the access list is not filtering traffic on the interface (as we tend to expect of access lists). In this case the access list is selecting traffic for Policy Based Routing. So it is saying that only port 3333 to host 172.255.55.89 will be subject to PBR. All other traffic should be forwarded normally.

I am not clear why implementing this access list is blocking some lan to lan traffic. Perhaps you can supply some additional information that would help us to identify the problem.

HTH

Rick

topic POLICY BASED ROUTING Q? in Network Security

POLICY BASED ROUTING Q?

POLICY BASED ROUTING Q?

POLICY BASED ROUTING Q?