Although we have configured all traffic to route through Private1(SD-WAN Router 1) using AAR, there is still some traffic passing through biz-int. We have built the SD-WAN environment with the configuration shown in the attached image.
On the vSmart, we have implemented the following settings to ensure that all data traffic is routed through Private1 using AAR.
app-route-policy Site01_AAR
vpn-list VPN3301
sequence 9999
action
count AAR_Sequence_9999
sla-class SLA_Class_0 preferred-color private1
policy
sla-class SLA_Class_0
loss 100
!
However, when checking with Zabbix (a network monitoring tool), we observed that there is traffic (about 20Mbps) passing through the WAN(Biz-internet) interface of SD-WAN Router 2.
Our expectation was that all traffic would be routed through the WAN of SD-WAN Router 1.
Do you have any idea why this might be happening? Could the traffic bursts observed in Zabbix be related to this issue?
sh flow monitor sdwan_flow_monitor cache format table
Cache type: Normal (Platform cache)
Cache size: 32768
Current entries: 3
High Watermark: 11
Flows added: 35
Flows aged: 32
- Active timeout ( 60 secs) 1
- Inactive timeout ( 10 secs) 31
IPV4 SRC ADDR IPV4 DST ADDR TRNS SRC PORT TRNS DST PORT IP VPN ID IP PROT tcp flags intf input intf output bytes long pkts long time abs first time abs last flow end reason conn initiator intf overlay session id input intf overlay session id output conn conn id long drop cause id bytes drop long sdwan sla not met sdwan preferred color not met sdwan queue id pkts drop long ip dscp app name
=============== =============== ============= ============= ========== ======= ========= ==================== ==================== ==================== ==================== ============== ============= ==================== ================= ============================= ============================== =================== ============= ==================== ================== ============================== =============== ==================== ======= ================================
172.18.62.16 172.26.32.1 0 2048 15 1 0x02 Gi0/0/1.936 Null 252 3 07:57:30.456 07:57:32.494 Not determined Reverse initiator 19 0 0x00000000000074CD 0 0 0 0 2 0 0x00 layer7 ping
172.18.7.22 172.26.32.1 0 2048 15 1 0x02 Gi0/0/1.938 Null 1512 18 07:57:04.159 07:57:31.317 Not determined Reverse initiator 8 0 0x00000000000074CB 0 0 0 0 2 0 0x00 layer7 ping
Thank you for your comment!
I did show sdwan policy service-path.
And, both router use private1.
