PBR more than one hop

[h.wall]

Is there a way to configure pbr so it will force all traffic on one segment to a router 3 hops away. I am installing bluesocket and need to have all my wireless segment traffic route to the bluesocket gateway. We are using ospf for routing in case you know of a way to do it with ospf. The current sites that are one hop away work great with the next-hop command. I would put next-hop commands on all routers until they reach the intended router if nessecary.

[thisisshanky]

Just configure a recursive next-hop in PBR. Make sure the route is available on the router.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1829/products_feature_guide09186a008021de72.html

[dbellazetin]

Just a thought...You could set up a GRE tunnel between the two endpoint routers and then you can specify PBR to match the tunnel interface, or the next hop ip for the tunnel.

Daniel

[paddyxdoyle]

Hi,

Did you get any joy with this?

I am running a pilot with Bluesocket devices on a university campus which has multiple sites all over London.

Ideally i would like to have a centralised deployment but at the moment its not looking that promising.

My problem is that if i add route maps on each hop on the path to the Bluesocket (as many sites are more than 1 hop away), on some of the devices the processor utilisation dramatically increases due to the volume of none-wireless traffic that's also passing through the route-maps, so its not really a method we could use unless its done at the source, i.e. the interface on the local router to which the AP is attached.

I would be very grateful if you could share any findings you have.

In the meantime, i am gonna try out the recursive next hop.

Thanks

Paddy

[thisisshanky]

PBR disables Fast switching and hence loads the CPU when there is a lot of traffic that needs to be policy routed. To improve performance you could optionally try Fast switched PBR or CEF switched PBR.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800c75d2.html#wp1005373

You should see the IOS, memory, other processes running on the router before enabling CEF on the router.

[paddyxdoyle]

Thanks for the info.

We are allready running CEF on this router so unfortunately is not going to help. Its a 7507 with multiple FE interfaces and quite a high volume of traffic.

I am interested in looking at the recursive next hop PBR but having read through the document i am still unsure as to how it works.

I am still thinking i would need to have route maps on each hop towards the destination.

Thanks

Paddy

[h.wall]

I am still working on it. I had a call into tac but the engineer said that recursive pbr is not available for my routers(3745). I would like to avaoid creating gre tunnels because it is 65 locations and it will takle some time. Currently we are testing using several acl's.