Hi @ImranSyed14455
Here is an example from the whitepaper:
![Screenshot 2021-10-08 083846.png Screenshot 2021-10-08 083846.png](https://community.cisco.com/t5/image/serverpage/image-id/133768iE49B8109EE21A639/image-size/large?v=v2&px=999)
VRF1 scope: 2949121
Consumer EPG pctag (VRF1): 49153
VRF2 scope: 2326532
Provider EPG pctag (VRF2): 25
In case of Inter-VRF PBR, after the service graph is deployed, the consumer VRF instance (scope 2949121) has permit and redirect rules for inter-VRF traffic, and the provider VRF instance (scope 2326532) has a permit rule for intra-VRF traffic.
What is important to observe in the zoning rules, is that there are two rules one for Consumer (49153) to Provider (25) and another one from Provider (25) to consumer (49153).
This example is taken from PBR whitepaper, which I would recommend you reading if you would like to have a better understanding of what happens under the hood: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739971.html
Stay safe,
Sergiu