PBR with ACE in bridge mode

[eng_elshreef]

I have one ACE configured in bridge mode.

for proxy users : they have the VIP as proxy so the traffice from the client with destination the VIP

but there are some users without proxy so we used the Policy Base Routing and it is working and can see the connections on the ACE

but with destination IP of the websites so the traffice is not comming back as show below

BC-LB1/BlueCoat# sho conn | include 10.1.50.10

1782765    1  in  TCP   210  10.1.50.10:52052      67.195.160.76:80      SYNSEEN

1355728    1  out TCP   210  67.195.160.76:80      10.1.50.10:52052      INIT

BC-LB1/BlueCoat#

in the PBR , we used the VIP as next hop address.

please advice what is the problem?

thanks in advance

[Daniel Arrondo Ostiz]

Good afternoon,

As you mentioned, it seems the return traffic is not coming back through the ACE. You should review your PBR configuration to ensure that also the return traffic is matched and sent to the ACE

Regards

Daniel

[eng_elshreef]

I forced the traffic for the test subnet to go through the ACE but it did not solve the issue.

the traffic is sourced / destinationed to the website directly , normally the traffic is destinated to VIP and sourced from the IP address of the cash engine.

[Daniel Arrondo Ostiz]

Please, open a TAC case. We'll investigate further