We have some PBR's in place that I thought were manipulating all traffic correctly, however some changes made by our network team resulted in traffic that was apparently being incorrectly routed through the DMZ getting blocked. So now I want to do some more reading and make sure I understand them fully.
k
Kari Ruissalo (WyW)
02/16/2021, 5:26 AM
I have not used interfaces on any PBRs but rather just the next hop / source ip / destination ip / protocol selections, those get you pretty far in most cases. What's your requirement?
s
Seth Wisdom
02/16/2021, 6:15 AM
You have two internal LANs and one DMS LAN? Is one of the internal LANs a dedicated management VLAN?
n
Neal Dolson
02/16/2021, 2:30 PM
Yeah, so one DMZ, one management, and one for some lbvips. Then it needs to be able to reach the backend servers across about 4 VLANs it isn't directly connected to, otherwise default route to DMZ.
s
Seth Wisdom
02/16/2021, 5:29 PM
Does your Subnet IP have access through its gateway to access the 4 VLANs?
Seth Wisdom
02/16/2021, 6:30 PM
A better question may be, what traffic is the issue that is not flowing?