Page 1 of 4

Policy Based Routing

Posted: 29 Mar 2010 15:02
by matiasniosi
In Cisco IOS it is possible to define a second next-hop address in case the first one is unreachable.

Is this possible in Alcatel-Lucent's PBR or it's just one address and if it is unreachable traffic is dropped??

Thank you!

Posted: 31 Mar 2010 04:03
by silvio
yes, PBR is possible with a policy action "gateway". But PBR means depend of a condition (f.e. source-net) an other gateway will be used.
From you description I understand, that PBR isn't necessary. Normaly you can create a second static route with different gateway but higher metric.
regards Silvio

Posted: 05 Apr 2010 07:52
by matiasniosi
Silvio, thanks for your response!

The problem I have is that I have connection to 3 different ISPs and need to give different types of services to the clients taht are connecting to internet through our infrastructure. So static routing won´t do since it will be the same routing definitions for all clients. That is why I need PBR, but if the chosen route is down I need the equipment to redirect that traffic to a second ISP. So I need PBR with a secondary backup route. Is this possible?

Thanks again!

Posted: 07 Apr 2010 02:20
by silvio
Hi,
I haven't fully understand which condition directs the traffic to a specific ISP. But via QoS/ACL it's possible to do it. As condition you can use any. PLease look in the network-guide:
"Policy Based Routing may be used to redirect traffic to a particular gateway based on source or destination IP address, source or destination network group, source or destination TCP/UDP port, a service or service group, IP protocol, or built-in source port group.
Traffic may be redirected to a particular gateway regardless of what routes are listed in the routing table. Note that the gateway address does not have to be on a directly connected VLAN; the address may be on any network that is learned by the switch."
Also you can create a second route with lower precedence. If the first route (with higher precedence) is inactive than this should be used. I haven't tested this.
regards
Silvio

Posted: 07 Apr 2010 15:45
by cedric1
hello Guys

I have in a last lab try to use 2 static routes with same metric.

If gateway of route 1 become down , switch doesn't see it.

what about your experience Silvio ?

I haven't test it with gateway define in an action in pbr polcie !!

Cedric

Posted: 07 Apr 2010 16:22
by agungaryo
matiasniosi wrote:Silvio, thanks for your response!

The problem I have is that I have connection to 3 different ISPs and need to give different types of services to the clients taht are connecting to internet through our infrastructure. So static routing won´t do since it will be the same routing definitions for all clients. That is why I need PBR, but if the chosen route is down I need the equipment to redirect that traffic to a second ISP. So I need PBR with a secondary backup route. Is this possible?

Thanks again!


hi matiasniosi ,
CMIIW , I just trying to help your case .
yups,if we use static routing it would be globally used for all your customer .

I don't know for 6850 Omniswitch solution but if you consider to use 7750 SR ,
for classifying your customer ( I guess you mean source address based ) you can use "IP Filter "
and for backup routing (3 ISP) you can use "redirect-policy" ( technically you should insert it in "action" part of "ip filter" and you can use PING or URL or SNMP test to perform backup )
so,I guess "IP Filter " + "Redirect Policy" should solve your issue

regards
agung aryo

Posted: 07 Apr 2010 16:51
by matiasniosi
This is my problem, imagine you hace three clients (C1, C2 and C3) and thre ISPs (ISP1, ISP2 and ISP3).

I need:
For C1: Main route ISP1 / Backup route ISP2
For C2: Main route ISP2 / Backup route ISP3
For C3: Main route ISP3 / Backup route ISP1

I can filter the clients based in thier source IP addresses, and the ISPs by physical ports.

¿Is this possible in a OS6850?

Thank you all!!

Posted: 08 Apr 2010 02:13
by silvio
@Cedric - unfortunately I haven't the time to test it by my self at the moment . There is a new feature (start with 6.3.4) named Bidirectional Forwarding Detection (BFD). In network guide I have read that this can also used with static routing:
"-> ip static-route 10.1.1.1 255.0.0.0 gateway 10.1.1.25 bfd-std status enable
or for all static routes
-> ip static-route all bfd-std enable
...
You can display the static routes on which BFD is enabled by using the show ip route command. For
example:
-> show ip route
Once BFD determines that the next hop is unreachable, it informs IPRM that the neighbor is down. On
receiving this message, IPRM moves the routes corresponding to this gateway to inactive routing database
if BFD status is enabled. If BFD determines that the gateway is reachable, IPRM moves the routes corresponding
to the gateway to the forwarding database."
I think this will help Matiasniosi

regards Silvio

Posted: 08 Apr 2010 10:18
by cedric1
hello
I confirm that a gateway wich is down will no be seen by the switch (continue to have gateway in routing table)

BFD is a good way to Go !!

But with BFD it is mandatory to have it configured on both router (your router, and router wich is your gateway, here isp router)

I will try to test PBR policy ,what we can exactly do with that

Cedric

Posted: 11 Apr 2010 15:45
by cedric1
hi

PBR or QOS policy will not sove this issue , why ? , because by this way e don't see a defect gateway.

Key is in BGP protocol.

6850 run a AS number ? right

Cedric