twillstera
Technical User
Hey all, I'm trying to do some PBR to run traffic to 2 specific subnets through a WAN optimizer. The remote end is an inline optimizer so all outbound traffic is automatically optimized. The local end is out-of-band so I need to use PBR to route all other subnet traffic to it.
192.168.0.0/24
192.168.1.0/24
192.168.2.0/24... etc
Needs to route to 192.168.99.2 which will then go over an encrypted/optimized tunnel to 192.168.5.6
I included a diagram of the setup. Here's my current pertinent configs.
interface GigabitEthernet0/0
description Local
ip address 192.168.0.7 255.255.255.0
ip flow ingress
ip route-cache policy
ip policy route-map bb2rem
duplex full
speed 1000
!
interface GigabitEthernet0/1
description "Silver-Peak WAN"
ip address 192.168.99.1 255.255.255.0
duplex full
speed 1000
interface Serial0/1/0:1
description Remote
ip address 192.168.254.9 255.255.255.252
ip flow ingress
encapsulation ppp
<<<removed text>>>
router rip
version 2
network 192.168.0.0
network 192.168.254.0
!
no ip classless
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 192.168.0.10
!
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 24 permit 192.168.0.134
access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.6.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.7.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.8.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.15.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.105.0 0.0.0.25
access-list 101 permit ip 192.168.100.0 0.0.0.255 192.168.105.0 0.0.0.25
access-list 101 permit ip 192.168.104.0 0.0.0.255 192.168.105.0 0.0.0.25
access-list 101 permit ip 192.168.101.0 0.0.0.255 192.168.105.0 0.0.0.25
!
route-map bb2rem permit 10
match ip address 101
set ip next-hop 192.168.99.2
Some traffic goes out correctly, but the majority just goes out through the RIP route 192.168.0.7 -> 192.168.254.10 -> 192.168.5.1
Thanks for any help that you can offer.
Adam
192.168.0.0/24
192.168.1.0/24
192.168.2.0/24... etc
Needs to route to 192.168.99.2 which will then go over an encrypted/optimized tunnel to 192.168.5.6
I included a diagram of the setup. Here's my current pertinent configs.
interface GigabitEthernet0/0
description Local
ip address 192.168.0.7 255.255.255.0
ip flow ingress
ip route-cache policy
ip policy route-map bb2rem
duplex full
speed 1000
!
interface GigabitEthernet0/1
description "Silver-Peak WAN"
ip address 192.168.99.1 255.255.255.0
duplex full
speed 1000
interface Serial0/1/0:1
description Remote
ip address 192.168.254.9 255.255.255.252
ip flow ingress
encapsulation ppp
<<<removed text>>>
router rip
version 2
network 192.168.0.0
network 192.168.254.0
!
no ip classless
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 192.168.0.10
!
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 24 permit 192.168.0.134
access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.6.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.7.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.8.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.15.0 0.0.0.255 192.168.5.0 0.0.0.25
access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.105.0 0.0.0.25
access-list 101 permit ip 192.168.100.0 0.0.0.255 192.168.105.0 0.0.0.25
access-list 101 permit ip 192.168.104.0 0.0.0.255 192.168.105.0 0.0.0.25
access-list 101 permit ip 192.168.101.0 0.0.0.255 192.168.105.0 0.0.0.25
!
route-map bb2rem permit 10
match ip address 101
set ip next-hop 192.168.99.2
Some traffic goes out correctly, but the majority just goes out through the RIP route 192.168.0.7 -> 192.168.254.10 -> 192.168.5.1
Thanks for any help that you can offer.
Adam