Hi,
Wondering if anyone can advise on what I might have misconfigured here.
Our network is quite complex, but simplified I'm trying to redirect certain traffic from a particular host out of a different gateway.
I'm doing this as at the minute our main internet gateway is running extremely slowly, Whilst most of the network services need to run out of this gateway typical internet traffic can be sent out of our alternative internet gateway without issues.
The route-map I've created is below:
route-map InternetSpeedTest, permit, sequence 10
Match clauses:
ip address (access-lists): 102
Set clauses:
ip next-hop 10.98.190.54
Nexthop tracking current: 10.98.190.54
10.98.190.54, fib_nh:38555B58,oce:3E85E670,status:1
the relevant access list is:
Extended IP access list 102
10 permit ip host 10.211.15.78 host 104.82.226.132 (15 matches)
the route-map is applied to the relevant SVI (we use a layer3 switch for all our routing)
As can be seen on the access list it's been hit a few times.
If I run a traceroute on the test device 10.211.15.78 to the address 104.82.226.132 then I can see the traffic following the intended path. However when I browse to that host webpage- which is the fast.com speedtest site. and perform a speedtest I can see that it's source address is not the public address of our external gateway.
I've tried opening up the ACL to include a /16 for the destination addresses in case fast.com has a number of addresses spread about but this had the same result.
Is there something I'm missing in the config? Why is ICMP traffic following the correct route, but typical web traffic i.e. 80/443 isn't?
