Static route or Default Route for Single VLAN

[Saeed Siddiqui]

Hello Awesome Engineers,

this is a problem i am facing and i hope you can help and navigate me to the right direction. to keep it simple i will give you a simple example:

i have nexus 9508, it has a

default route

pointing to ethernet 5/5 which is connected to my company/s corporate site.  -> this is working fine, so we are good here.

i have many SVIs  and those are under EIGRP being

redistributed

into BGP -> this is also working fine, so we are good here as well.

then i have another SVI lets say interface vlan 10, i want to make this SVI to go out to internet but i cannot use

default router

as it is already pointing to company's Corporate. i cannot use static route because destination is not known, it can go to any destination. so the bottom line is only VLAN 10 should be allowed to go to 172.10.1.1 as a next hop for any destination.

any help?

[MHM Cisco World]

Use pbr under vlan10 set next hop ip 172.10.1.1

[Saeed Siddiqui]

may i get some detail information or any article that can help? 

how about static route over vlan like this:

switch# configure terminal swicth(config)# interface vlan 10 switch(config-if)# ip address 192.0.2.1/24 switch(config-if)# ip route 172.10.1.1 vlan 10  switch(config-if)# copy running-config startup-config

[MHM Cisco World · Accepted solution]

https://laptrinhx.com/configure-policy-based-routing-on-cisco-router-4050746629/amp/

Your suggest config not work' check link above 

[Saeed Siddiqui · Accepted solution]

thanks for all your help VIP Mentor, this link really helped.

i have created a configs, would you please have a look and let me know if this will work?

Switch#1
interface Vlan10
description
no shutdown
ip address 192.168.1.2/24
hsrp 10
preempt
priority 110
ip 192.168.1.1

interface Vlan20
description Connection to the upstream Firewalls
no shutdown
ip address 172.10.1.5/29
hsrp version 2
hsrp 20
preempt
priority 120
ip 172.10.1.4

interface Ethernet1/1
description Physical Connection to upstream Firewalls
switchport
switchport access vlan 20
no shutdown

---------------------------------------------------------------------------------

Switch#2
interface Vlan10
description
no shutdown
ip address 192.168.1.3/24
hsrp 10
preempt
ip 192.168.1.1


interface Vlan20
description Connection to the upstream Firewalls
no shutdown
ip address 172.10.1.6/29
hsrp version 2
hsrp 20
preempt
ip 172.10.1.4

interface Ethernet1/1
description Physical Connection to upstream Firewalls
switchport
switchport access vlan 20
no shutdown
--------------------------------------------------------------------------------------

requirement: only traffic originated from 192.168.1.0/24 should go out 172.10.1.1 which is HA address of cisco firepower, all other traffic should go out to

Default Route.

at present, all the traffic is going out to

default route

which is company's corporate network.

PBR Configs:

Switch#1
access-list 100 permit ip 192.168.1.0 0.0.0.255 any

route-map vlan10_to_net
match ip address 100
set next hop 172.10.1.1

interface Vlan10
ip policy route-map vlan10_to_net


Switch#2
access-list 100 permit ip 192.168.1.0 0.0.0.255 any

route-map vlan10_to_net
match ip address 100
set next hop 172.10.1.1

interface Vlan10
ip policy route-map vlan10_to_net

[MHM Cisco World]

You are so welcome