a Q about PBR behavior

[baselzind]

let us say we have vlan 1 which is  192.168.1.0/24 and we apply under interface vlan 1 a PBR with a route map that have the below access list and routes to a difference ip

deny ip  192.168.1.0 0.0.0.255 any

permit ip any any

which means any incoming  traffic originating from vlan1 will not be affected by the PBR. But what about the traffic coming from other networks and subnets into interface vlan1? like internet traffic coming back with source public ip? how it isn't affected by the PBR and able to reach users in vlan1

[MHM Cisco World]

PBR check the inbound not outbound traffic. 
this PBR I think is wrong, because the specify the subnet of this VLAN SVI as destination not as source. 

[baselzind]

I think you are correct i corrected it. but also when traffic comes back to vlan1 users it is inbound to vlan1?

[MHM Cisco World]

review this image 

[baselzind]

so outbound traffic means the traffic coming back to answer the inbound traffic?

[MHM Cisco World]

Yes correct 

[paul driver]

Hello 

ip access-list extended ACL
deny ip  192.168.1.0 0.0.0.255 any
permit ip any any

Int vlan 1
ip access-group ACL IN/OUT

SVI ACL logic
IN =  traffic originating from withIN the vlan 
OUT = egress traffic towards the vlan, originating OUTside

However if the above ACL is not applied directly under the SVI and is ONLY being called upon within a Policy Base Routing route-map stanza that has a permit stanza then all traffic from subnet 192.168.1.0/24 will NOT be policy routed (so normal routing) but it should policy route any other traffic (if there is any)

route-map PBR permit 10
match ip address ACL
set ip/interface/default....etc

Int vlan 1
ip policy route-map PBR

So the above logic = ACL deny RM permit = deny task

other logic
ACL permit RM permit = permit task
ACL deny RM deny = deny task