Applying PBR on CAT3560 Switch

[samirshaikh52]

Hello Community,

I have created a pbr route-map and i want to apply this interface vlan

But when goes ot interface vlan I dont see the option

ip policy route-map PBR

It says unrecognized command

I dont know whats the issue. Can someon help ?

Thanking in advance

[Jon Marshall]

samirshaikh52 wrote:
Hi Fred and Jon,
For instance i want to say that ip route 10.1.100.0 255.255.255.0 10.1.101.1
Meaning that route vlan 100 traffic to that destination ip i,e adsl router interface ip.
Can i do this ?

No you can't because you cannot route based on source IP which is what you want to do.

What the above says is to get to 10.1.100.0 255.255.255.0 then go to 10.1.101.1 which is not what you want. You want to say traffic from 10.1.100.0/24 should go to 10.1.101.1 which is not the same thing.

As i said before static routing does not allow you route traffic based on the source IPs only on the destination IPs.

Jon

[samirshaikh52]

Hi Experts,

I have no support for PBR on my switch, so please can someone suggest what other way of routing i can use.

Here i need to allow specific vlan to go through particular next-hop

I will really appreciate your help.

Thanks

[Frederic Vanderbecq]

What you want to achieve can only be done with PBR. Standard routing can only allow you to make routing decisions based on destination IP. Making decisions for specific sources can only be done via PBR.

Fred

[samirshaikh52]

Hi Fred,

Thank you for your reply

I'd  a cisco ADSL 877 Router.
This router is connected to Cisco 3560e Switcport and i have assigned this port to vlan 100.
Moreover I have a dhcp pool on Router configured for the vlan 100 and 101
I want to dedicate thie ADSL internet for two vlans in my nework
VLAN 100    10.1.100.0\24
VLAN 101     10.1.101.0\24

here is a piece of configuration from router and switch

***ADSL Router:-
ip dhcp exclude-address 10.1.100.1 10.1.100.10
ip dhcp exclude-address 10.1.101.1 10.1.101.10
ip dhcp pool VLAN100
network 10.1.100.0 255.255.255.0
default-router 10.1.100.x

ip dhcp pool VLAN101
network 10.1.101.0 255.255.255.0
default-router 10.1.101.x

Interface x/x
ip address 192.168.10.x 255.255.255.0
ip address 10.1.100.x 255.255.255.0 secondary

ip route 10.1.101.0 255.255.255.0 10.1.100.1

Switch Config

int vlan 100
ip address 10.1.100.x 255.255.255.0
ip address 192.168.10.x 255.255.255.0 secondary
ip helper-address 192.168.10.x

int vlan 101
ip address 10.1.101.x 255.255.255.0
ip helper-address 192.168.10.x

Access-list 100 deny ip 10.1.100.0 0.0.0.255 10.0.0.0 0.255.255.255
Access-list 100 deny ip 10.1.101.0 0.0.0.255 10.0.0.0 0.255.255.255
Access-list 100 permit ip 100.1.100.0 0.0.0.255 any
Access-list 100 permit ip 100.1.101.0 0.0.0.255 any

Access-list 101 permit ip 10.1.100.0 0.0.0.255 any
Access-list 101 permit ip 10.1.101.0 0.0.0.255 any

Router-map Set-Default-GW permit 5
Match ip address 100
set ip default next-hop 192.168.10.x

Now the issue i am facing that how can i apply this route map on vlan 100 and 101

[Jon Marshall]

samirshaikh52 wrote:
Hi Fred,
Thank you for your reply
I'd  a cisco ADSL 877 Router.
This router is connected to Cisco 3560e Switcport and i have assigned this port to vlan 100.
Moreover I have a dhcp pool on Router configured for the vlan 100 and 101 
I want to dedicate thie ADSL internet for two vlans in my nework 
VLAN 100    10.1.100.0\24
VLAN 101     10.1.101.0\24

here is a piece of configuration from router and switch
***ADSL Router:-
ip dhcp exclude-address 10.1.100.1 10.1.100.10
ip dhcp exclude-address 10.1.101.1 10.1.101.10
ip dhcp pool VLAN100
network 10.1.100.0 255.255.255.0
default-router 10.1.100.x

ip dhcp pool VLAN101
network 10.1.101.0 255.255.255.0
default-router 10.1.101.x

Interface x/x
ip address 192.168.10.x 255.255.255.0
ip address 10.1.100.x 255.255.255.0 secondary
ip route 10.1.101.0 255.255.255.0 10.1.100.1

Switch Config

int vlan 100
ip address 10.1.100.x 255.255.255.0
ip address 192.168.10.x 255.255.255.0 secondary
ip helper-address 192.168.10.x

int vlan 101
ip address 10.1.101.x 255.255.255.0
ip helper-address 192.168.10.x

Access-list 100 deny ip 10.1.100.0 0.0.0.255 10.0.0.0 0.255.255.255
Access-list 100 deny ip 10.1.101.0 0.0.0.255 10.0.0.0 0.255.255.255
Access-list 100 permit ip 100.1.100.0 0.0.0.255 any
Access-list 100 permit ip 100.1.101.0 0.0.0.255 any

Access-list 101 permit ip 10.1.100.0 0.0.0.255 any
Access-list 101 permit ip 10.1.101.0 0.0.0.255 any

Router-map Set-Default-GW permit 5
Match ip address 100
set ip default next-hop 192.168.10.x
Now the issue i am facing that how can i apply this route map on vlan 100 and 101

We know the issue you are facing. How many times do we have to tell you before it sinks in ? You cannot do PBR on a 3560 with IP Base. You need IP Services. There is no magical way we can suddenly get IP Base to do PBR for you.

You say you want vlan 100 and vlan 101 to go via the ADSL router ? - where does the rest of the traffic go ie. if it's not the ADSL router where do you want to send it ?

Jon