dhcp default route is taking precedence over pbr next hop in this dual wan + pbr + sla + floating static route scenario. In other offices with the same config approach for dual wan + pbr + sla + floating static route failover but with only static ip isp's I've been able to direct traffic to either isp on the fly with pbr route-map attached to the lan interface. At this office with one dhcp ip isp and one static ip isp, i put pbr policy on the lan interface and the traffic targeted by the acl on the route-map all still goes to the dhcp ip isp 1.1.1.1 unless i add static routes for the traffic pointed at 2.2.2.1 which negates the point of using the pbr. Any ideas?
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.2(4)M1
c2900-universalk9-mz.SPA.152-4.M1.bin
2911#sh int G 0/1
GigabitEthernet0/1 is up, line protocol is up
Description: dhcp isp
Internet address is 1.1.1.2/28
!
2911#sh ip static route
Codes: M - Manual static, A - AAA download, N - IP NAT, D - DHCP,
G - GPRS, V - Crypto VPN, C - CASA, P - Channel interface processor,
B - BootP, S - Service selection gateway
DN - Default Network, T - Tracking object
L - TL1, E - OER, I - iEdge
D1 - Dot1x Vlan Network, K - MWAM Route
PP - PPP default route, MR - MRIPv6, SS - SSLVPN
H - IPe Host, ID - IPe Domain Broadcast
U - User GPRS, TE - MPLS Traffic-eng, LI - LIIN
IR - ICMP Redirect
Codes in []: A - active, N - non-active, B - BFD-tracked, D - Not Tracked, P - permanent
Static local RIB for default
D 0.0.0.0/0 [1/0] via 1.1.1.1 [A]
T [200/0] via 2.2.2.1 [N]
!
interface GigabitEthernet0/0
description lan interface for 192.168.0.0/24 subnet hosts
ip address 192.168.0.1 255.255.255.0
ip policy route-map path-control
!
interface GigabitEthernet0/1
description wan dhcp isp
ip address dhcp
!
interface GigabitEthernet0/2
description wan static isp
ip address 2.2.2.2 255.255.255.252
!
ip route 0.0.0.0 0.0.0.0 2.2.2.1 200 name static-isp track 2
ip route 0.0.0.0 0.0.0.0 dhcp
!
ip nat inside source route-map DHCP_ISP_NAT interface GigabitEthernet0/1 overload
ip nat inside source route-map STATIC_ISP_NAT interface GigabitEthernet0/2 overload
!
ip access-list extended specific-traffic-acl
permit ip any object-group specific-hosts
deny ip any any
!
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 101 permit ip host 1.1.1.2 object-group our-trusted-hosts
access-list 102 permit ip host 2.2.2.2 object-group our-trusted-hosts
!
ip local policy route-map LOCAL
!
ip sla 2
icmp-echo 2.2.2.1 source-interface GigabitEthernet0/2
frequency 5
ip sla schedule 2 life forever start-time now
!
route-map DHCP_ISP_NAT permit 10
match ip address 1
match interface GigabitEthernet0/1
!
route-map STATIC_ISP_NAT permit 10
match ip address 1
match interface GigabitEthernet0/2
!
!
route-map path-control permit 20
match ip address specific-traffic-acl
set ip next-hop verify-availability 2.2.2.1 1 track 2
!
route-map LOCAL permit 10
match ip address 101
set ip next-hop 1.1.1.1
!
route-map LOCAL permit 20
match ip address 102
set ip next-hop 2.2.2.1
