PBR policy

[Hamada Ahmed]

I need to forward all traffic come to port 1 to LTE card and all traffic comes to port port 2 to exit VDSL card, how to do that?

[Richard Burts]

We need more/better information if we are to give you good advice. What model device is this? What are port1 and port 2 and how are they configured? In fact it would be helpful to see the current complete running config. It would also be helpful to know whether this is to be done on real hardware or done on some emulator (and if so which emulator).

[Hamada Ahmed]

Device is Cisco router C8300 port 1 and port 2 are the LAN ports

so i need to enforce all traffic come to Port 1 (LAN) to exit LTE (WAN) and traffic come to port 2 (LAN) to exit VDSL ( WAN)

[Joseph W. Doherty]

To amplify @Richard Burts information request, detailed information, like his request for a copy of the running config, is needed if you desire detailed recommendations.

Additional detailed information may also be needed on the destination and source networks (e.g. #.#.#.#/#) involved too.

I believe (?) PBR doesn't have a match interface option.  It also applies to ingress traffic.  Futher reasons why detailed information is being requested.

Otherwise, we might only be able to point you toward additional documentation about PBR, and leave it to you to figure it out.

[Giuseppe Larosa]

Hello @Hamada Ahmed ,

>> so i need to enforce all traffic come to Port 1 (LAN) to exit LTE (WAN) and traffic come to port 2 (LAN) to exit VDSL ( WAN)

if no fallback is needed and you just need segregation you can use two VRFs one for port1 and LTE and one for port2  and the VDSL WAN

Warning: if the LAN ports need to talk to each other you should look for PBR

Hope to help

Giuseppe

[Richard Burts]

Thanks for telling us that this will be on 8300 (I assume real hardware rather than some emulator). But just saying port 1 and port 2 does not give us nearly enough information. Are these configured as vlan access ports, or as vlan trunk ports, or as routed ports? And are port1 and port 2 in the same IP subnet or in different subnets?

[Hamada Ahmed]

Port 1 and port2 it's L3 port connect to firewall,

[balaji.bandi]

What firewall is this? Can you explain more, instead of just a single line for us to guess?

What does Port 1 do? Do you have an IP address? And, what does Port 2 do? Do you have any IP address space? 

how is your network topology looks like ?

[Hamada Ahmed]

Firewall act as SDwan, this firewall connect to C8300 which include all WAN connection , DSl and LTE, so I need to implement SDwan on firewall, which need to have two different ports for failover or load balance, but as there is only one router, so I need to create PBR to allow traffic comes from port 1 (which is connected to FW with IPx) to be forward through VDSL, and Trafic comes to port 2 (which is connected to FW with IPy) to be forward to LTE

[balaji.bandi]

Check the example below to guide you and let me know if any other information is needed:

https://www.balajibandi.com/?p=1643