Core Switch 3750 PBR

[Sheraiz Ahmad]

Hi

I have a 2 ISP One Hooked to router A and the Other to B both are hooked to Core switch 3750. The Port on the switch where the Router is connected is No switch Port and I have given the IP address.

3750 - has the PBR templated

I would like to use PBR to redirect traffic to Router B

VLan 120 - 172.20.20.0

access-list 120 permit ip 172.20.20.0 0.0.0.255 any

route-map NewISP permit 10

match ip address 172.20.20.0

set ip next-hop <new asa ip>

But this does not work....I can ping to the switch Port, cannot be to the Router B.

Could you please advise..

Thankyou

[Raju Sekharan]

Hi Sheraiz,

When you say you can't pinf router B, are you mentioing that you are not able to ping to next-hop IP?

For PBR to work, the next-hop ip should be reachble from the switch and it should be directly connected

Raju

[Sheraiz Ahmad]

Hi Raju

Yes, the Ip for my Router is 192.168.200.X - 255.255.255.0

The Port its connected on the switch is No switch Port with Ip of 192.168.200.B - 255.255.255.0

I am connected on the Lan and I can ping the Ip of the switch Port, but I cannot ping the IP of the Router..

Could you please advise..

vlan 120 = 10.120.0.0/24

vlan 140 = 10.140.0.0/24

access-list 120 permit ip 10.120.0.0 0.0.0.255 any

access-list 140 permit ip 10.140.0.0 0.0.0.255 any

Create a policy that matches on these acls:

route-map NewISP permit 10

match ip address 120

set ip next-hop

route-map NewISP permit 20

match ip address 140

set ip next-hop

Then apply to your vlan interfaces:

int vlan 120

ip policy route-map NewISP

int vlan 140

ip policy route-map NewISP

[Raju Sekharan]

We need to troubeslhoot the routing first

Can you try pinging the router from switch and check if you haev ARP entries present at both sides

If ARP is presnt is present at both sides, then we can debug ip icmp on the router and ping from switch and see if the ping is reaching the router

Thank you

Raju

[Sheraiz Ahmad]

Hi

I am woundering as my 3750 has a default route that points to the other Router.

Should I create another static route to point to the new Router or Router B

[Raju Sekharan]

For directly connected Subnet, you don't need to add any route

Thanks

Raju