Cannot ping between vlan's

[khhhhhhhh957]

Hi,

After applying the PBR in my network, I can not ping between the different vlan's (5,20,200). The fact of having applied the PBR, is that i have 2 ISP with 2 different networks.

Can I not ping between the VLANs because acl or rights or is it because i have 2 ISP with 2 different networks ?

Have you an idea ?

Thank you and good day !

[GRANT3779]

I assume you could ping between vlans without the PBR?

From looking at your DATA ACL first of all, you are essentially matching ALL IP traffic. I think this will be processed before looking at directly connected routes. Are you only supposed to be sending internet bound traffic or did you intend to send all IP traffic?

For the Voice -

route-map PBR permit 20
match ip address VOIP
set ip next-hop 192.168.1.1    - Where exactly is this next hop?

[khhhhhhhh957]

Hi, yes i can ping between vlan's without PBR. 

I would like to make sure that a VLAN 20 goes through the ISP2 and all the other VLANs by the ISP1.

The 192.168.1.1 is the ip of interface of internet modem.

[GRANT3779]

If you are talking about internet bound traffic only for DATA you could amend your ACL

e.g 

ip access-list extended DATA
permit tcp 192.168.0.0 0.0.0.255 any eq 80 443

This will PBR the Internet bound traffic and everything else should follow routing table.

[khhhhhhhh957]

With this command, i can ping between vlan's but i have not internet access with hosts from vlan 5 (192.168.0.X)

[GRANT3779]

I see you have DNS Servers listed as part of the DHCP Scopes. I do not see any default route though on the config you supplied.

How do your clients know how to route to the DNS server for example?

[khhhhhhhh957]

I had a default route but I deleted it. I thought that with the PBR it would no longer be used ...

[GRANT3779]

The PBR will be used.

This is checked at ingress on the Interface you apply it to. Anything matching your ACL will use the PBR.

Everything else will route as if there was no PBR.