Routing
Reply
Visitor
Magician
Posts: 1
Registered: ‎10-21-2010
0

PBR IS NOT WORKING

Hi,

I am in need to implement PBR for load balancing and also to provide redundancy b/w two site to site Route based  vpns. Connectivity b/w sites is as we are using two subnets in sites A 10.2.x.x/24 and 10.1.x.x/24 and in site B we are using 10.33.x.x/24.

 

Spoiler

  SITE A                                                                                                    SITE B

VPN1 is using tunnel.1                                                                VPN1 is using tunnel.1

 

VPN2 is using tunnel.2                                                                VPN2 is usnig tunnel.2

 

ROUTING:                                                                                      ROUTING:

 

 ROUTES FOR SITE B:                                                                ROUTES FOR SITE A:                                             

 

10.33.X.X/24    route to tunnel.1  metric 1                                10.2.X.X/24 route to tunnel.2 metric 1

10.33.X.X/24    route to tunnel.2  metric 1                                10.2.X.X/24 route to tunnel.1 metric 2

                                                                                                         10.1.X.X/24 route to tunnel.1 metric 1

                                                                                                         10.1.X.X/24 route to tunnel.2 metric 2

 

PBR CONFIG:

 

ACL: IF SOURCE IS 10.2.X.X Then use interface tunnel.2

          IF SOURCE IS 10.1.X.X Then use inetrface tunnel.1

 

POLICE IS BIND TO VR(TRUST) :

 

Every thing works accordingly as long as tunnel.2 on SITE A remains up

as soon as tunnel.2 went down all traffic sourced from 10.2..X.X starts dropping

in SITE A.

 

Kinldy help what and where I am making mistake !!!

 

Adnan !

 

                                                                                                           

 

 

 

 

 

 

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.