PBR issue

[stephen.stack]

Hi All,

I am deploying PBR at the moment in a simple configuration. The 'ip policy' is applied to a sub-interface on a 2811 and all ACLs and route-maps look good. I am using NAT also in this configuration. It is a very simple build, basically stating that all traffic inbound on this sub-interface is to use a next hop of x.x.x.x

My testing is not working, but i need clarity on this. For different reasons, i am not able to tests with hosts on the relevant VLAN yet, as there is not. So i am testing on the local router using the sub-interface as the source IP. i.e. 'ping 8.8.8.8 souce int fa0/0.99' or telnet www.cisco.com 80 source fa0.0.99

Nat appears to be working, but my debug on ip policy is not showing any hits. Will my tests work when i am sourcing packets from the locally connected interface? My reckoning is that it should.

Thanks

Stephen

[cadet alain · Accepted solution]

Hi,

If you want to test with packets sourced from the router you must  put global command ip local policy route-map.

Regards.

Alain.

[stephen.stack]

Thanks Alain.

I was not aware you could apply 'ip policy' globally. Nonetheless, i labbed it up in GNS and low and behold PBR work when packets were sourced from outside the router, and failed when ther were sourced internally.

Thanks for your help

Stephen