Cisco IOS Router - Lab4 - PBR (Policy Based Routing).mov

Cisco IOS Policy Based Routing using route-maps. If the console window is blurry. View in HD720 and full screen.

Category:

Education

Tags:

• Cisco
• IOS
• Router
• PBR
• Policy
• Based
• Routing
• Route-map
• Configure
• Tutorial
• Training
• Lab

[zayyaf1]

Can we apply route-maps to Vlan interface ? if not then how can i apply them on layer 2 interface. If can not be applied to layer 2 port as it is ROUTE map then can we do anything on layer 2 similar to this ?

Regards

[CovertSecOps]

@zayyaf1

Yes, you can apply route-maps to VLAN interfaces. You have to enable the SDM routing template to do this. You cannot however manipulate layer 2 traffic using route-maps. It's strictly for layer 3 traffic and I'm not aware of a layer 2 equivalent. Google for SDM template and you'll find links to Cisco docs.

GL

CSO

[catalystrain2009]

hi

topology inside router ----SITEAROUTER====SITEBROUTER­--------inside router

i ma using NATTING on both the SITE ROUTERS and using ipsec tunnel( site to site),...

now i want to bypass the natting and i am using PBR to by pass it....theoritically its working

but when i m doing it practically.its not working in any of the ways, nor the vpn tunnel is coming up nor it is taking any path to reach the other peer.

please check it out of its working

contact me at pce.abhishek@gmail.com for more info

[CovertSecOps]

@catalystrain2009

This should work. Can you send the conigs of the SiteA and SiteB routers to me? If they are in production, just put fake IPs in place of the real IPs. I will have a look.

Regards,

CSO

[ashrarai1]

Very good explanation of PBR, thank you for uploading this video

[CovertSecOps]

@coblain

Have a look at the following vids...

Cisco IOS Router - Lab3 - IP SLA - Route Tracking

Cisco IOS Router - Lab8 - HSRP

Cisco IOS Router - Lab9 - GLBP

and

Cisco Lab - Client ABC . This one has 3 parts but part 3 talks about load balancing with IP CEF.

I also have failover vids for Cisco ASA if you need that.

Have a look at those vids. One of them might be what you're looking for. Let me know if those don't help and maybe we can figure something out.

CSO

[CovertSecOps]

@coblain

That's correct. 0.0.0.255 is inverse of a /24 mask.

[coblain]

@CovertSecOps

ok the situation is..

we got one router connected to two ISPs..

the first ISP only use for main application traffic only..

the second ISP used only for internet traffic..

so i decided to spilt the traffic using PBR, and found this great video :)

one more thing,

is there any video by you that explain bout load sharing or failover on cisco..,? i've found some but none of them explain the way you did..

keep up the good work bro..

[coblain]

@CovertSecOps

upss, my mistake.. i meant is a /24 , so it should be like this 255.255.255.0 and the wild card mask is 0.0.0.255, CMIIW

tq for fast response..

:)

[CovertSecOps]

@CovertSecOps

To be a bit clearer. Let's say your source subnet is 1.1.1.0/30 and your proxy server is 192.168.1.100. You would write your ACL like this...

access-list 100 permit ip 1.1.1.0 0.0.0.3 host 192.168.1.100

Hope that's what you were looking for.

CSO