Policy based Routing Q

[dpugalendi.d]

In the Policy based Routing , i would like to know , what packets are denied by the access list " Deny ip any any " statement ? ; pls help me  and when i implement this the access list is blocking some lan to lan packets why ?

ip access-list extended SECONDARY_TRAFFIC
permit tcp any host 172.255.55.89 eq 3333
permit udp any host 172.255.55.89 eq 3333
deny   ip any any log

route-map LINK_2 permit 10
match ip address SECONDARY_TRAFFIC
set interface Tunnel901
!
interface GigabitEthernet0/0
description  LAN INTERFACE
ip address 172.7.1.10 255.255.255.0
ip policy route-map LINK_2
duplex auto
speed auto

[Andrew Nam]

Your access-list will only pass a match of any source to destination 172.255.55.89 port tcp and udp 3333. Anything other than this will not pass the tunnel 901 interface.

regards

Andrew

[ameya_oke]

Hey there,

Generally we do not block any traffic in PBR and only divert traffic acc to policy.

In your config Just remove the deny statement from ACL and add another route map statement.

1)ip access-list extended SECONDARY_TRAFFIC

     no deny   ip any any log

2)

route-map LINK_2 permit 10

match ip address SECONDARY_TRAFFIC

set interface Tunnel901

route-map LINK_2 permit 20

Issue would be resolved.

Please rate if helpful

Ameya