FMC Flexconfig PBR

[mortezasadeghi]

I have been adding a route-map via flexconfig and it worked fine, but when I change some access-list rule or any change not flex config and deploy all route-map configuration still in running-config but the PBR does not work.

if I remove the PBR with prepend flexconfig and read it works well. also, this procedure for any change is repeated.

[balaji.bandi]

post the config bit, is the same route-map are you using for both PBR ?

[mortezasadeghi]

Hi Balaji

Yes, the route-maps are the same.

route-map $PBR-USER permit 10

set ip netx-hop $GW-USER

route-map $PBR-DMZ permit 10

set ip next-hop $GW-DMZ

route-map $PBR-SRV permit 10

set ip next-hop $GW-SRV

route-map $PBR-WL permit 10

set ip next-hop $GW-WL

interface ethernet1/13

policy-route route-map $PBR-USER

interface ethernet1/11

policy-route route-map $PBR-DMZ

interface ethernet1/8

policy-route route-map $PBR-SRV

interface ethernet1/6

policy-route route-map $PBR-WL

[balaji.bandi]

 I change some access-list rule or any change 

what change, using FMC, that should not make any changes, if you do Manually on the device, that may have an issue.

we are not sure what is the variable content ? or what other changes you added, if would be nice to get information after adding ACL and how the config looks like, so we get a chance to find the reason? what is wrong?

https://integratingit.wordpress.com/2021/04/18/ftd-policy-based-routing/

[mortezasadeghi]

Hi Balaji

for example, I added new nat and deploy the configuration to FTD, after the changes commit all PBR to stop working and all configurations for PBR are still present in the running-config.

I guess this is a bug.

[balaji.bandi]

NAT on out going ?

[mortezasadeghi]

incoming nat

[balaji.bandi]

Can you post that information.

[mortezasadeghi]

Which information do you want?

[balaji.bandi]

After adding NAT which broke system, so i am looking that syntax.