source-sensitive routing -PBR

[jagdev.dhaliwal]

Hello All,

I have three subnets 192.168.1.x/24, 192.168.2.x/24 and 192.168.3.x/24 they are on 4507 with HSRP configuration
now i want for one subnet 192.168.1.x/24 default route should be towards 10.15.0.10 and for rest of two newtworks
10.15.0.11

access-list 10 permit 192.168.1.0 0.0.0.255

!
interface vlan 200
ip policy route-map TestPBR
!
route-map TestPBR permit 10
match ip address 1
set ip next-hop 10.15.0.10

ip route 0.0.0.0 0.0.0.0 10.15.0.11

Please can any one confirm that above mentioed configuration is finne or do i need to take care any thing else?

Regards

JD

[IAN WHITMORE · Accepted solution]

That should work. Anything other than VLAN 200 will be routed to the default route if there is no other entry in the routing table (static for example for other destinations) and the traffic coming from interface vlan 200 should be policy routed.

You did have a typo though (match IP address):

route-map TestPBR permit 10
match ip address 10
set ip next-hop 10.15.0.10

HTH,

Ian

[jagdev.dhaliwal]

Thanks Ian,

Yes that was a typo mistake but i have few other static routes like

ip route 172.16.0.0 255.255.0.0 10.15.0.11

but upto my understanding it will prefer the router for vlan 200 as per route map

but if have set ip default next-hop than it will first the specific routes in route table

if not found the as a default route it choose that.

in my configuration it should always forward  the traffic towards 10.15.0.10

more i have HSRP normal configuration for the Vlan 200 will it be ok?

Regards

JD

[IAN WHITMORE]

You are right. Here is a great explanation on the difference between ip next-hop and ip default next-hop with & without static routes:

http://www.cisco.com/en/US/tech/tk364/technologies_configuration_example09186a00801f3b54.shtml

HSRP shouldn't interfer with the policy decision so it should be OK.

HTH,

Ian

[jagdev.dhaliwal]

Thanks Ian,