cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1193
Views
0
Helpful
9
Replies

Policy Based Routing trouble with inter-vlan routing for single host device

CKluck001
Level 1
Level 1

So I have a strange network at the moment, between two firewall/internet company's. I have few policy's that are routed out to another gateway but my internal vlan doesn't seam to be working it seams.  

Quick Example 

I have a WS-C4500 with 2 networks connected to it - 10.10.0.1/16 and 10.26.141.1/24. 

I have a Server vlan 104, 10.26.104.1/24 that can gets routed out through 10.10.0.1/16 and that works with just fine and everything can hit it. Now I created a PBR on this vlan and I want to route out 10.26.104.10/24 to my 10.26.141.0/24 network. 

so i have 1 access list:

ip access-list extended Net-Route
permit ip host 10.26.104.10 any

and 1 pbr

route-map NetRoute permit 10
match ip address Net-Route
set ip next-hop 10.26.141.1

Is there anything I missing for my intervlan not working? 

Thanks everyone. 

9 Replies 9

Hello,

where is the next hop 10.26.141.1 ? Try to set the interface instead and see if that makes a difference...

That IP 10.26.141.1 is my firewall after that 69.168.242.xx Address.

The cisco interface port 10.26.141.2

You may have to apply PBR for ingress and egress with differnent route map that will help you in hitting traffic to sort out problem

So are you saying a PBR on the Cisco and then a PBR on my firewall. 

Hello,

my bad, I forgot that the 3850 doesn't even support 'set interface' in route maps. Either way, try and configure:

3850#(config-if)# ip route-cache policy
3850(config)# ip local policy route-map NetRoute

on your switch as well...

OH crap sorry I gave you my wrong switch, been one of those days. My Layer 3 is my C4500X

Hello,

on a side note, make sure you are not hitting this bug:

PBR: Not working in XE 3.5.0E under IPBASE license
CSCuq03562
Description
IPv4 PBR will not be functional in 4500 under 3.5.xE having IPBASE license

Symptom:
PBR can be configured but will not function as expected in IPBASE license.

Conditions:
4500 under 3.5.0E having IPBASE license

Workaround:
None

Further Problem Description:
IPv4 PBR in 4500 under 3.5.0E having IPBASE license will not work. If customer switches to ENTSERVICES license then it will work.

So do I need to remove my -

(config)#ip policy route-map NetRoute on my Vlan 104 

And then have this - 

(config)#ip local policy route-map NetRoute

Hello,

this was for the 3850, since you have a 4500x, I don't know if this applies at all. The 'ip local policy' command is in addition to anything else, don't remove your ip policy route-map'...

Have you checked if the bug applies to your switch ? Are you running IPBase ?

Review Cisco Networking for a $25 gift card