clear df bit + policy based routing

[raf.vanderveken]

Hi,

I've been implementing a setup where a remote office has a cisco 1900 router.

There are 2 GRE/IPSEC tunnels to the headquarters, 1 over public internet, 1 over a private cloud.

Because of some MTU issues we have te clear the DF bit for some of the traffic, but

we also want to use PBR to send https traffic over the "public internet" tunnel and the rest of the traffic

over the "private cloud" tunnel. I'm able to clear the DF bit and to do the PBR with route-maps, but

I'm not able to implement both functionalities at the same time.

Does someone has an idea how to solve this issue ?

thanks

raf

[lgijssel]

It is possible to have multiple set-commands with the same match-command.

Could look like this:

route map-entry 10

match https traffic

set df-clear

set ip next-hop

route map-entry 20

match all other traffic

set df-clear

set ip next-hop (if applicable)

The above syntax is obviously not correct but if you grasp the idea, you might be able to make it work.

Looks like finding the correct syntax is not your problem.

If this does not do the trick, you should provide the config.

regards,

Leo