[c-nsp] VRF-Aware PBR?

[robbie]

For what it's worth, I can find nothing on the 2600XM platform that will 
let you PBR within a VRF. You can easily tag non-VRF traffic to enter a 
VRF of your choosing (from the global data plane) but you can't actually 
PBR traffic that comes into your router on a VRFed interface. Sorry.

(ran into this problem about 4 months ago, had to end up doing PBR on a 
CPE firewall split into virtual domains, ick.)


-- 
Cheers,
Robbie

christian.macnevin at uk.bnpparibas.com wrote:
> Hi,
> Having difficulty finding whether there's now support for straight-forward 
> vrf-aware PBR. We need to match by protocol and set a next ip hop within 
> the vpn. I've seen the 'select vrf based on pbr' feature already, but have 
> no idea what it's good for (looks like a reesult of customer feature 
> requested due to bad design, personally) but can't find anything simply 
> letting me do simple PBR.
> 
> Anyone?
> 
> This message and any attachments (the "message") is 
> intended solely for the addressees and is confidential. 
> If you receive this message in error, please delete it and 
> immediately notify the sender. Any use not in accord with
> its purpose, any dissemination or disclosure, either whole 
> or partial, is prohibited except formal approval. The internet 
> can not guarantee the integrity of this message. 
> BNP PARIBAS (and its subsidiaries) shall (will) not 
> therefore be liable for the message if modified. 
> 
> **********************************************************************************************
> 
> BNP Paribas Private Bank London Branch is authorised 
> by CECEI & AMF and is regulated by the Financial Services
> Authority for the conduct of its investment business in the
> United Kingdom.
> 
> BNP Paribas Securities Services London Branch is authorised
> by CECEI & AMF and is regulated by the Financial Services
> Authority for the conduct of its investment business in the 
> United Kingdom.
>   
> BNP Paribas Fund Services UK Limited is authorised and 
> regulated by the Financial Services Authority.
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>