is there a way to enable pbr on vrf interface?

[kawak_zx7]

hi all,

currently, i have a requirement to enable pbr in vrf interface of a 4948 switch. but as i browse the internet, it is quite impossible to do that. is there any alternative way / feature to get the same result as pbr does? which is to reroute the specific vrf traffic to another interface based on source and destination ip address?

thanks in advance.

[Giuseppe Larosa · Accepted solution]

Hello Kawak,

your issue is platform dependent, that is specific of these type of multilayer switch.

A software based router like an ISR or ISR2 ( C2800 or similar) might be able to perform this action.

configuration guide is clear about the limitation it is not a question of IOS version

"PBR  configuration is only allowed on interfaces belonging to the global  routing table. PBR is not supported on interfaces that belong to VRFs"

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/54sg/configuration/guide/pbroute.html

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/15.02SG/configuration/guide/pbroute.html#wp1027962

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/15.1/XE_330SG/configuration/guide/pbroute.html

So only adding a separate box could be a fix.

there is a feature called source based VRF selection but it should be supported only on provider class nodes like C12000 or above.

Hope to help

Giuseppe

.