[c-nsp] easy way to re-route sql traffic down alternate link? - verify commands

[Matt Bazan]

I've set up the same on router A but I don't believe this is matching
the return traffic..

Will the 'access-list 110 permit tcp any any eq 1433' match traffic
where either the source or destination port is 1433?  Thanks.

> -----Original Message-----
> From: Rodney Dunn [mailto:rodunn at cisco.com] 
> Sent: Tuesday, April 12, 2005 12:45 PM
> To: Matt Bazan
> Cc: Rodney Dunn; Bruce Pinsky; cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] easy way to re-route sql traffic down 
> alternate link? - verify commands
> 
> 
> On Tue, Apr 12, 2005 at 12:22:53PM -0700, Matt Bazan wrote:
> > Here's how I plan to set this up.  Looks very straightforward.  If 
> > anyone would have a sec to point out problems I'd be very 
> > appreciative:
> > 
> > SanRafael#(config) access-list 110 permit tcp any any eq 1433 //ACL 
> > for sql traffic
> > SanRafael#(config) route-map SQL-Traffic permit
> > SanRafael#(config-route-map) match ip address 110
> > SanRafael#(config-route-map) set ip next hop <address of 
> 'C' router> 
> > 	//should I use an interface instead of IP here to insure proper 
> > route?
> 
> No.  I never recommend anyone use an interface as a next hop.
> 
> > SanRafael#(config) int fa0/0
> > SanRafael#(config-if) ip policy route map SQL-Traffic 
> > 	//if i understand correctly, policy map needs to be applied to
> > interface that policy traffic enters on.
> 
> Correct.
> 
> > 
> > then setup reverse on the 'A' router.  anything else?  thanks again.
> 
> Correct.
> 
> You haven't looked in to the SAA stuff. Search for PBR object 
> tracking on CCO. If the link between A-C goes down PBR with 
> your current setup will send the SQL to C and C would route 
> it back through B to get to A. It will work but suboptimal.
> 
> PBR is just like static routes. By themselves they don't 
> adjust to changes in the network which usually makes them a bad idea.
> 
> You can path that somewhat with variations of SAA to detect a 
> failure in the path and change the forwarding behavior based 
> on that change.
> 
> Rodney
> 
> 
>