PBR not functioning

pratik_193 · ‎03-02-2011

Hi all,

I have a weird problem..

I am having 7206 router on which 1 MPLS link & 1 P2P link is terminated.

i have applied an ACL specifing source & destination & the next hop.

what happening is if my source is 192.168.1.0 0.0.0.255 & i trace to 172.29.64.0 0.0.0.255...it is going via MPLS link while the next hop is set to P2P link.ca Please help me on this....

i am attaching part of my config.

interface FastEthernet3/0
description *** IDC P2P LAN ***
ip address 192.168.4.20 255.255.255.128
ip policy route-map Towards_Malad
duplex full
!
interface FastEthernet3/1
description *** P2P_IDC_WAN ***
ip address 10.1.1.2 255.255.255.252
ip route-cache flow
ip policy route-map Towards_IDC
duplex full

ip access-list extended Towards_IDC
permit ip 172.29.0.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 172.29.0.0 0.0.0.255 10.32.163.0 0.0.0.255
permit ip 172.29.0.0 0.0.0.255 10.72.176.0 0.0.0.255
permit ip 172.29.0.0 0.0.0.255 10.1.1.0 0.0.0.255
permit ip 172.29.0.0 0.0.0.255 192.168.4.0 0.0.0.255
permit ip 172.29.64.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 172.29.64.0 0.0.0.255 10.32.163.0 0.0.0.255
permit ip 172.29.64.0 0.0.0.255 10.72.176.0 0.0.0.255
permit ip 172.29.5.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip host 172.29.7.42 192.168.1.0 0.0.0.255
permit ip host 172.29.7.41 192.168.1.0 0.0.0.255
permit ip 172.29.5.0 0.0.0.255 10.32.163.0 0.0.0.255
permit ip 172.29.5.0 0.0.0.255 10.72.176.0 0.0.0.255
ip access-list extended Towards_Malad
permit ip 192.168.1.0 0.0.0.255 172.29.0.0 0.0.0.255
permit ip 10.32.163.0 0.0.0.255 172.29.0.0 0.0.0.255
permit ip 10.72.176.0 0.0.0.255 172.29.0.0 0.0.0.255
permit ip 10.1.1.0 0.0.0.255 172.29.0.0 0.0.0.255
permit ip 192.168.4.0 0.0.0.255 172.29.0.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 172.29.64.0 0.0.0.255
permit ip 10.32.163.0 0.0.0.255 172.29.64.0 0.0.0.255
permit ip 10.72.176.0 0.0.0.255 172.29.64.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 172.29.5.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 host 172.29.7.41
permit ip 192.168.1.0 0.0.0.255 host 172.29.7.42
permit ip 10.32.163.0 0.0.0.255 172.29.5.0 0.0.0.255
permit ip 10.72.176.0 0.0.0.255 172.29.5.0 0.0.0.255

route-map Towards_Malad permit 10
match ip address Towards_Malad
set ip next-hop 10.1.1.1
!
route-map Towards_IDC permit 20
match ip address Towards_IDC
set ip next-hop 192.168.4.21

Thanks

Pratik

IAN WHITMORE · ‎03-02-2011

I think the problem here is that the routing decision is being made before it goes out the interfaces and you probably have a route/default route through the MPLS link.

You should apply the route map incoming interface from the LAN. If you need to, you can combine the two route maps into one.

route-map my_PBR permit 10
match ip address Towards_Malad
set ip next-hop 10.1.1.1
!
route-map my_PBR permit 20
match ip address Towards_IDC
set ip next-hop 192.168.4.21

Regards,

Ian