Need a suggestion for Eigrp Route manipulation

[suryaaa]

Dear Team, 

Please help me to guide on this below scenario. Desktop 0 & 1 try to video conference to Desktop 2 & 3.

Between all router eigrp protocol is running & all load going through via switch 3 - CSR1000v0-ext conne2-firewall3. But i want to manipulate the route for vc, i want to for vc route will going via alternate route switch1 - csr1000v1-extconn3-firewall2.

Please help how is it possible.

[Joseph W. Doherty]

Policy route on the VPN devices?

[suryaaa]

may be, I don't know, can you please share commands.

[Joseph W. Doherty]

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/pbroute.pdf

[suryaaa]

Thanks for reply, But as per above topology on which device need to implement policy based routing. Please share.

[Joseph W. Doherty]

To provide more detail, you would need to provide more detail, such as possibly full device configs.

[MHM Cisco World]

Hi friend 

Can you more elaborate.

MHM

[suryaaa]

Actually i want to say, 

Desktop 0 & 1 try to video conference to Desktop 2 & 3.

Between all router eigrp protocol is running & by default all traffic pass via switch 3 - CSR1000v0-ext conne2-firewall3. But I want to manipulate the route for vc, i want to use second link for vc route will going via switch1 - csr1000v1-extconn3-firewall2.

[Giuseppe Larosa]

Hello @suryaaa ,

you need to use PBR . PBR works on inbound traffic on received traffic so you should apply it on the LAN interface of VPN devices. You need to use PBR because you want to use different paths based on source IP address this cannot be achieved by manipulation of EIGRP metric that applies to the whole IP subnet.

Hope to help

Giuseppe

[MHM Cisco World]

Thanks friend for detail but still you have one VPN' and origin IP will encap inside VPN IP which flow via one path.

To make this work you need 

1- two VPN

2- local PBR for VPN 

3- PBR to push traffic via one of VPN tunnel 

MHM

[suryaaa]

thanks for reply, But already on that topology two vpn already there, & vpn model is Trustway Bull VPN support by ATOS.
Trustway

[MHM Cisco World]

Are you use policy based or route based VPN?

If you use policy based then as I mention above (three points) and you confirm the first point' then still two point need to config to get load balance.

If route based VPN' then this easy via eigrp by use offset list 

https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/221548-configure-eigrp-to-influence-path-select.html#toc-hId-621284588

MHM

[Joseph W. Doherty]

Ah, as I never used EIGRP on a production network, forgot about that feature.  In this case, would need host routes?