04-30-2024 02:55 AM
I want to know ways to change behaviour for one site. For example for site 10 (originator 1.1.1.204) where mpls has higher preference than Internet only for site 10, But can't find decision to do it when I have common policy for all of my sites.
I knew that I can change topology only for site 10 and perform it, but maybe I can do it in the common topology?
I have site list
site-list DC
site-id 1-2
!
site-list Site-Branches-membership
site-id 10-20
and cotrol policy for all my branches
control-policy Topology-Branches-On_Demand
sequence 1
match tloc
!
action accept
!
!
sequence 11
match route
prefix-list _AnyIpv4PrefixList
site-list DC
!
action accept
!
!
sequence 21
match route
prefix-list _AnyIpv4PrefixList
site-list Site-Branches-membership
!
action accept
set
tloc-action backup
tloc-list DC_Border_ISP-1
!
!
!
sequence 31
match route
prefix-list _AnyIpv4PrefixList
site-list Site-Branches-membership
!
action accept
set
tloc-action backup
tloc-list DC_Border_ISP-2
!
!
!
default-action reject
and it's applied for site branches - out direction
apply-policy
site-list DC
control-policy VPN1-to-Branches in
!
site-list Site-Branches-membership
control-policy Topology-Branches-On_Demand out
Solved! Go to Solution.
04-30-2024 03:02 AM
changing in the common template will apply for all the devices when you push it,
rather i create a seperate templete relevant config and apply for that site will have better outcome.
04-30-2024 01:59 PM
Hi,
Separate policy per site-group is needed based on site objectives. There is no way in common policy.
At best case, you may develop some automation with APIs.
04-30-2024 03:02 AM
changing in the common template will apply for all the devices when you push it,
rather i create a seperate templete relevant config and apply for that site will have better outcome.
04-30-2024 03:15 AM
Yeah, but for 50 sites it doesn't convenient
and to make it worse) in vmanager central policy (policy application) we don't have search box for topologies (as and in lists) so if we have a lot of aplied topologies it seems like disaster
04-30-2024 01:59 PM
Hi,
Separate policy per site-group is needed based on site objectives. There is no way in common policy.
At best case, you may develop some automation with APIs.
04-30-2024 02:15 PM - edited 05-04-2024 04:56 AM
!!
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide