10-30-2023 06:13 AM
Hi,
Is it possible on a 3750X switch to use PBR to force the use of a loopback as next-hop ?
I tried the following configuration but it doesn't work :
ping 10.10.10.100 source lo0 = PING OK
ping 10.10.10.100 source vlan10 = PING KO !
ip access-list extended ACL_PBR
permit ip 10.0.0.0 0.0.0.3 any
!
route-map PBR permit 10
match ip address ACL_PBR
set ip next-hop 192.168.1.103
!
interface Loopback0
ip address 192.168.1.103 255.255.255.255
!
interface Vlan10
description *TEST PBR*
ip address 10.0.0.1 255.255.255.252
no ip redirects
no ip proxy-arp
ip policy route-map PBR
!
Thanks !
10-30-2023 06:20 AM
Hello!
You cannot have the next hop address as yourself? Why would you like to achieve that?
BR
10-30-2023 06:42 AM - edited 10-30-2023 06:42 AM
I believe you are not hitting your PBR route-map at all currently as PBR is only evaluated for ingress traffic for the interface. You can verify this with debug ip policy.
I am also a bit confused as to what you are trying to achieve here.
10-30-2023 07:14 AM
Hello @sebastien3,
What do you want to do at final ? Test basicly PBR or a way to blackhole trafic ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide