2014年2月24日星期一

How to configure policy based routing on 3750

In our datacenter we have a WS-C3750X-12S-S   stack with IP base image.  I have enabled PBR and reloaded the switch.  Show sdm prefer says i am using default template.  The reason i want to use PBR is that we have 2 firewalls on the same work and want to be able to have granular control over which gateway out of the network they use but still be able to access all internal resouces accross wan and locally.

Created access list to identify traffic:

access-list 10 permit 10.2.3.59 (test workstation on vlan 3)

Created policy:

route-map TestASA permit 10
match ip address 10
set ip next-hop 10.2.0.3

Assigned policy to the user vlan3:

ip policy route-map TestASA

Results:
It changed the default gateway to the above gateway but i could not access any resources on any other vlan, could not access resouces accross wan.

Jason, the deny statement will prevent that traffic of be select by PBR. Then that traffic will be forwarded by normal routing table.

But I did a mistake. The ACL must be:
access-list 102 deny  ip host 10.2.4.240 YOUR_VLAN_1
access-list 102 deny  ip host 10.2.4.240 YOUR_VLAN_4
access-list 102 deny  ip host 10.2.4.240 YOUR_VLAN_254
access  WS-C3750V2-48PS-S   -list 102 permit ip host 10.2.4.240 any

没有评论:

发表评论