Hello Everbody
I have 2 router ( setting as HSRP Standby )
My lan point to the defaut gateway of the standby address ( 10.30.21.6)
On the Router 1 (high priority standby ) i have configured on the lan interface a PBR that redirect traffic http/https from ip 10.30.104.0/24 from my lan to the next hop of 10.30.21.4 (R2)
I have to mention that R1 and R2 are on the same segement
here is the detail configuration
R1
****** LAN Interface Configuration *****
interface GigabitEthernet0/0
description LINK TO LAN
ip address 10.30.21.1 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip flow monitor MYMONITOR input
ip nat inside
ip virtual-reassembly in
standby 0 timers 2 4
standby 10 ip 10.30.21.6
standby 10 priority 200
standby 10 preempt
standby 10 name HSRPGRPE1
standby 10 track 10 decrement 150
ip policy route-map PBR_104
duplex auto
speed auto
service-policy input QOS-MARKING1
end
***** SH ACESSS-LIST
Extended IP access list 104
10 permit tcp 10.30.104.0 0.0.0.255 any eq www
20 permit tcp 10.30.104.0 0.0.0.255 any eq 443
***********SH ROUTE-MAP
route-map PBR_104, permit, sequence 10
Match clauses:
ip address (access-lists): 104
Set clauses:
ip next-hop recursive 10.30.21.4
Policy routing matches: 0 packets, 0 bytes
route-map PBR_104, permit, sequence 20
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes
R2
****** LAN Interface Configuration *****
interface FastEthernet0/0
ip address 10.30.21.4 255.255.255.248
ip flow monitor MYMONITOR input
ip nat inside
ip virtual-reassembly in
standby 0 timers 2 4
standby 10 ip 10.30.21.6
standby 10 priority 150
standby 10 preempt
standby 10 name HSRPGRPE1
standby 10 track 20 decrement 100
duplex auto
speed auto
end
--------------------------------------------------------------------------------------
On R1 here is the debug of debug ip policy
IP: s=10.30.104.56 (GigabitEthernet0/0), d=195.8.12.141, len 40, FIB policy rejected(no match) - normal forwarding
IP: s=10.30.104.56 (GigabitEthernet0/0), d=195.8.12.141, len 40, FIB policy rejected(no match) - normal forwarding
IP: s=10.30.104.56 (GigabitEthernet0/0), d=195.8.12.141, len 40, FIB policy rejected(no match) - normal forwarding
IP: s=10.30.104.56 (GigabitEthernet0/0), d=195.8.12.141, len 40, FIB policy rejected(no match) - normal forwarding
IP: s=10.30.104.56 (GigabitEthernet0/0), d=195.8.12.141, len 40, FIB policy rejected(no match) - normal for
sh access-list
Extended IP access list 104
10 permit tcp 10.30.104.0 0.0.0.255 any eq www (331 matches)
20 permit tcp 10.30.104.0 0.0.0.255 any eq 443 (7 matches)
route-map PBR_104, permit, sequence 10
Match clauses:
ip address (access-lists): 104
Set clauses:
ip next-hop recursive 10.30.21.4
Policy routing matches: 0 packets, 0 bytes
route-map PBR_104, permit, sequence 20
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes
As YOU CAN see Nothing working on the route-map and the PBR
I don´t know what happen ?
