PBR not working on Nexus 7700

[roysm]

Hi

I am trying to set up PBR on a Nexus 7700 with nxos 8.4(2). The policy does not appear to take effect. I see no traffic going down the link and I see no hits on the ACL or route-map. 

I have used PBR on IOS devices and routers but this is the first time on NX-OS. Can anyone tell me if I have missed something or do I need to add something else?

My config is:

feature pbr

ip access-list X
statistics per-entry
10 permit ip 10.1.1.0/24 10.2.1.0/24
20 permit ip 10.1.2.0/24 10.2.1.0/24

route-map Y pbr-statistics
route-map Y 10
match ip address X
set ip next-hop 10.10.10.2/30

interface EthernetZ
ip address 10.10.10.1/30
ip policy route-map Y

Many thanks

Roy

[Sergiu.Daniluk]

Hi @roysm 

Config looks good. Do you have the Advanced Services license installed?

Stay safe,

Sergiu

[roysm]

Hi Sergiu

I don't have Advanced Services. We have LAN_Enterprise_Services, which according to the licensing guide, https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/licensing/guide/b_Cisco_NX-OS_Licensing_Guide/b_Cisco_NX-OS_Licensing_Guide_chapter_01.html#con_45490 supports PBR

This is confirmed on the switch:

# show license usage
Feature Ins Lic Status Expiry Date Comments
Count
--------------------------------------------------------------------------------
MPLS_PKG No - Unused -
STORAGE-ENT No - Unused -
VDC_LICENSES No 0 Unused -
FCOE-N77-F324FQ No 0 Unused -
FCOE-N77-F348XP No 0 Unused -
FCOE-N7K-F248XP No 0 Unused -
ENHANCED_LAYER2_PKG No - Unused -
TRANSPORT_SERVICES_PKG No - Unused -
LAN_ENTERPRISE_SERVICES_PKG Yes - In use never -
--------------------------------------------------------------------------------

# show license usage LAN_ENTERPRISE_SERVICES_PKG
Application Vdc
----------------------------------------------------------------------------
bgp <switchname>
pbr <switchname>
ospf <Switchname>
----------------------------------------------------------------------------

Am I missing something else?

Thanks
Roy

[Sergiu.Daniluk]

Hi @roysm 

Yes, my bad. Enterprise Services is the one needed. You should be good with it.

Check to see if you have any errors generated during the configuration time (use "show logging log").

What do you see in the "show route-map X pbr-statistics" output?

Cheers,

Sergiu

[roysm]

Sergiu

There are no errors in the logs for the that time period. 

If run show route-map pbr-statistics, it does not show anything

route-map X, permit, sequence 10
Policy routing matches: 0 packets

Default routing: 0 packets

Thanks

Roy