08-29-2024 01:49 AM
Working on PBR on cisco ISR 4331 router, but couldn't able to route as needed to the interface.
08-29-2024 01:57 AM
You use next hop tracking?
Check track first
Also did you apply Pbr under correct interface
MHM
08-29-2024 03:45 AM
Yes, I have configured sla with the track and mapped to the route-map. Also, I have applied on the correct interface where the source IP is originated. But the traffic is not passing to the expected outgoing interface.
08-29-2024 04:10 AM - edited 08-29-2024 04:11 AM
Show track breif <<- share this
Can I see ip sla and route-map config
Run
Debug ip policy
MHM
08-29-2024 05:01 AM
track 10 ip sla 10 reachability
ip sla 10
icmp-echo 10.47.3.X source-interface Port-channelXX
frequency 10
ip sla schedule 10 life forever start-time now
route-map ISP-INT, permit, sequence 10
Match clauses:
ip address (access-lists): ACL
track-object 10
Set clauses:
ip next-hop verify-availability 10.47.3.X 10 track 10
Nexthop tracking current: 0.0.0.0
10.47.3.X, fib_nh:0,oce:0,status:0
Policy routing matches: 0 packets, 0 bytes
08-29-2024 05:04 AM
****** Conf for route-map ************
route-map ISP-INT permit 10
match ip address ACL
match track 10
set ip next-hop verify-availability 10.47.3.X 10 track 10
08-29-2024 05:21 AM
Hello @michaelgebreegziabher21778 ,
there is a platform dependent part in this kind of route-maps
try to add:
route-map ISP-INT permit 10
set ip next-hop 10.47.3.X
and see what happens
Hope to help
Giuseppe
08-29-2024 05:25 AM
You mean with no match?
08-29-2024 08:05 AM - edited 08-29-2024 08:08 AM
Hello @michaelgebreegziabher21778 ,
I mean to add the statement
set ip next-hop 10.47.3..X in the existing configuration without deleting anything
Also what kind of interface you are applying the route-map inbound ?
I hope it is a physical routed interface and not a port-channel.
Hope to help
Giuseppe
08-29-2024 05:05 AM
debug ip policy <<-
08-29-2024 05:07 AM
Nothing is shown in the debug ip policy.
08-29-2024 05:10 AM
Then friend either you not config policy under correct interface
Or your ACL is wrong <<- show ip access-list (check hit)
Or you config PBR before ACL
So you need to delete PBR abd config it again
Note:- no need match track 10' track 10 use for verify next-hop only
MHM
08-29-2024 05:26 AM
Okay, Let me check it brief and reconfigure it again
08-29-2024 04:22 AM
Hello
From that route-map output I see no tracking being applied ?
route-map xx
match ip address xx
match track x < --missing
also can you confirm the next-hop is directly connected or recursive?
08-29-2024 05:02 AM
Added match track on the route-map, still the same.
The next-hop is a directly connected.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide