VLAN Traffic Redirection
Passing traffic without PBR Example. Comparison of packets from one VLAN, then routing the output of another VLAN to their destination.
Remote server X, Y, Z hourly cached on the local server A, B, C. Members VLAN 10 use locally cached server 99% of the time, but occasionally need access to current data from the server X, Y, Z, which are located in another city . Traffic on the road between the local and remote servers are often higher than 100% of the bandwidth. To minimize delays in traffic between VLAN 10 user stations and remote servers are configured PBR to avoid bottlenecks.
Traffic Passage in the presence of PBR If configured routing rules, the traffic flow will be different from the original version, where the traffic comes at the lower path, but does not mean that at best.
In this case, the traffic goes through VLAN 20, which has a high-speed connection to the remote server.
Configuration
Initial data When setting up, the following input data.
VLAN 10, 20
Subnets: 1.1.1.0, 2.2.2.0, 3.3.3.0
IP-adresses: 1.1.1.50, 1.1.1.51, 1.1.1.52, 3.3.3.3, 3.3.3.4, 3.3.3.5, 2.2.2.1, 2.2.2.2
The first step is performed to create access lists for ABC and XYZ servers servers.
- /* Creating ACLs with IP-addresses of sources - Server ABC */
- console(config)#ip access-list servers-ABC
- console(config-ip-acl)#permit ip host 1.1.1.50 any
- console(config-ip-acl)#permit ip host 1.1.1.51 any
- console(config-ip-acl)#permit ip host 1.1.1.52 any
- console(config-ip-acl)#exit
- Create Access-list with destination IP addresses of servers XYZ…
- console(config)#ip access-list allow-1-1-1-clients
- console(config-ip-acl)#permit ip any host 3.3.3.3
- console(config-ip-acl)#permit ip any host 3.3.3.4
- console(config-ip-acl)#permit ip any host 3.3.3.5
- console(config-ip-acl)#exit
Creating a Route-Map, using access lists to servers from the routing policies to reroute customers through VLAN 20.
- console(config)#route-map clients-to-XYZ deny 10
- console(route-map)#match ip address servers-ABC
- console(route-map)#exit
- console(config)#route-map clients-to-XYZ permit 20
- console(route-map)#match ip address allow-1-1-1-clients
- console(route-map)#set ip next-hop 2.2.2.2
- console(route-map)#exit
Assign Route-Map and IP-addresses for the VLAN 10
- console(config)#vlan 10
- console(config-vlan10)#exit
- console(config)#interface vlan 10
- console(config-if-vlan10)#ip address 1.1.1.1 255.255.255.0
- console(config-if-vlan10)#ip policy route-map clients-to-XYZ
- console(config-if-vlan10)#exit
Then we put this remaining set of commands to configure routing
- console(config)#ip routing
- console(config)#vlan 20
- console(config-vlan20)#exit
- console(config)#interface vlan 20
- console(config-if-vlan20)#ip address 2.2.2.1 255.255.255.0
- console(config-if-vlan20)#exit
- console(config)#interface range gi1/0/1-10
- console(config-if)#switchport access vlan 10
- console(config)#interface range gi1/0/11-20
- console(config-if)#switchport access vlan 20