8

Considering a transition of specific public Internet site via a new location. At the current location, I've got a static route configured in my Cisco router pointed to my internal firewall. The new location is located over an MPLS connection (eBGP).

I have two local subnets in use at the existing location and would like to test only one of the subnets over the MPLS network to the new locations Internet access.

Is this possible with policy routing to have 1 local subnet utilize the static route to the firewall, and the 2nd subnet utilize the MPLS advertisement and route through the other site to the Internet for only this Internet site? If so, how?

Improve this question
1
  • 1
    Is the new location advertising a default route to the MPLS network? Can you add diagrams of the current topology and the desired solution please?
    – smoothbSE
    Jul 9, 2013 at 21:40

1 Answer 1

Reset to default
8

Policy-based routing works great for this. I recently did this to slowly cut over a hospital to a new internet edge one internal subnet at a time in exactly this way. 

ip access-list extended PBR_SUBNETS
 permit ip 172.16.1.0 0.0.0.255 any
!
route-map POLICY_ROUTE permit 10
 match ip address PBR_SUBNETS
 set ip next-hop 192.168.1.2

The above will redirect all packets from 172.16.1.0/24 to the IP address specified in the route-map. Change both as needed to fit your situation.

Apply this policy to the router interface that's facing your internal subnets.

interface GigabitEthernet0/1
 ip policy route-map POLICY_ROUTE

This route-map will set the next hop for all permitted traffic, regardless of the routing table. (Use of the "default" keyword can get around this but doesn't sound like you need to) This means that your static route is probably not needed for this purpose, but you can leave it in there as a fallback in case BGP fails.

FYI - the way I did this was to enter the entire configuration, live, during the day, but with no entries in the access list. Since nothing matches, obviously, all traffic behaves normally, following the routing table. This provides for a very easy, testable, reversible framework for switching internal subnets over, since all it takes from this point is just to add them to the ACL.

Improve this answer
1
  • the original question seems to be how to send the traffic from a particular subnet (which PBR handles well) to the new site for only a specific destination(s). updating the PBR_SUBNETS ACL should do the trick.
    – smoothbSE
    Jul 10, 2013 at 13:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.