08-12-2024 10:45 AM
Hi Everyone,
I've configured PBR on a C4500X and it works perfectly for client traffic hitting the router, but traffic originating from the SVI itself doesn't use the PBR. I confirmed this by monitoring the traffic on the next-hop (not a cisco device) where I see the traffic arriving via the wrong interface, additionally debug ip policy doesn't show traffic originating from the router itself.
PBR Config is as follows
route-map NoFilter permit 10
set ip next-hop 10.31.255.2
interface Vlan50
ip address 10.31.254.1 255.255.255.0
ip helper-address 10.31.50.2
ip policy route-map NoFilter
end
Some sample Debug output (from client traffic)
*Aug 12 17:38:06.086: IP: s=10.31.254.52 (Vlan254), d=10.31.254.255, len 229, policy match
*Aug 12 17:38:06.086: IP: route map NoFilter, item 10, permit
*Aug 12 17:38:06.086: IP: s=10.31.254.52 (Vlan254), d=10.31.254.255 (Vlan3102), len 229, policy routed
*Aug 12 17:38:06.086: IP: Vlan254 to Vlan3102 10.31.255.2
The router has Enterprise service license
Index 0 Feature: entservices
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Solved! Go to Solution.
08-12-2024 10:50 AM
08-12-2024 10:50 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide