how to understand Route-map used in L3 portchannel

[117222400]

Hi Experts,

Today when I am learning our company's routers configuration, I found that a Port-channel is in L3 and it is in VLAN490 as below:

interface Port-channel1.490
  description To_CP01
  encapsulation dot1Q 490
  ip flow monitor NETFLOW_MON input
  ip flow monitor NETFLOW_MON output
  ip address 10.2.48.84 255.255.255.248
  standby version 2
  standby 490 ip 10.2.48.86
  standby 490 timers 2 6
  standby 490 priority 255
  standby 490 preempt
  standby 490 track 490 decrement 15
  ip policy route-map RM_PBR_ZSCALER
  ip ospf authentication message-digest
  ip ospf message-digest-key 1 md5 7 0622043242195A2A46
  ip ospf 65118 area 0
!

An ip address was configured on the port channel, and a route-map was configured. The router-map is to match IP address ACLs and set the interface/next hop.

I never use this type of routing policy before, and is there any documents for this? I mean the route-map policy in port channel.

is the route-map policy in port channel higher priority than routing table? 

Thanks very much

[Giuseppe Larosa]

Hello @117222400 ,

it is an example of PBR = Policy Based Routing here some properties:

it processes user traffic in inbound direction on the L3 interface where it is applied in your case the po1.490

It processes only transit traffic , locally generated packets are not processed by standard PBR ( they can be processed by local PBR  that is applied at global level)

Input packets that match the conditions like match address  <ACL-name| ACL#>  are diverted using the set conditions that in your case set an IP next-hop .

The purpose of your PBR configuration is to send matching packets to a ZSCALER device.

Traffic not matching the route-map is not discarded but it is routed in normal manner using destination based IP routing table.

The set actions decides if the actions performed by PBR takes precedence over the IP routing table or not:

set ip next-hop overrides routing table

set interface overrides routing table

set ip default next-hop

set default interface

these last two actions are used only if there is no explicit route for the packets so they are used only to override the default route.

Hope to help

Giuseppe

[MHM Cisco World]

the route-map policy in port channel higher priority than routing table? Yes if you not use default keywords in command.

What most important is I don't think Pbr can apply to PO.

MHM