10-26-2021 05:48 AM - edited 10-26-2021 05:50 AM
hi all,
I've done some config with PBR and prepared the config ready to be applied to several L3 Switches 9300 and applied the next-hop verify-availability and sla but I have one doubt though. Having in account the image attached, I have the TCP traffic going clockwise and the UDP going anticlockwise, this is all good but if one link stops working, OSPF will take over and send the traffic the other way and if I have PBR applied on the other switches interfaces that link switch to switch (like I have), the traffic will enter and the switch will see that it's TCP or UDP and depending of the PBR will forward the traffic the same way where the traffic came from since in it's PBR it's saying that UDP or TCP has to go that way. Am I correct?
For what I understand if I remove the PBR from the links linking the switches, they won't follow the PBR but the switches will do PBR to all the other interfaces (configured like this), but if I don't apply PBR to the interface that links the switches, one switch will send the data to the other in accordance to the PBR but when the traffic enters the next switch because no PBR is present in the link between switches, OSPF will take over and depending on how the routing table is it can forward the traffic again to where it came from.
Am I correct in assuming all of this? What's the best way to deal/configure the switches to deal with this please?
This is an example of the configuration I have applied to the switches:
ip sla 1
icmp-echo 10.6.254.1
frequency 10
!
ip sla schedule 1 life forever start-time now
!
ip sla 2
icmp-echo 10.1.254.2
frequency 10
!
ip sla schedule 2 life forever start-time now
!
track 1 ip sla 1 reachability
track 2 ip sla 2 reachability
!
route-map TCP_UDP_RM permit 10
match ip address 101
set ip next-hop verify-availability 10.6.254.1 track 1
!
route-map TCP_UDP_RM permit 20
match ip address 100
set ip next-hop verify-availability 10.1.254.2 track 2
!
ip access-list extended 100
10 permit udp any any
!
ip access-list extended 101
10 permit tcp any any
Thank you
10-26-2021 10:49 AM
Hello
Using an IGP like Eigrp delay metric or OSPF interface costing but as I have already stated I believe what is being asked by your consultant isn’t an optimal routing suggestion!
10-31-2021 03:09 PM
Sure there may be other solution possible other than PBR in your case, based on the trigger conditions, but never deploy..so look around.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide