How to config PBR

Hi Sumanta, regarding "tmsh list ltm":

 

The output contains all preconfigured profiles, iRules, policies etc.. The /config/bigip.conf contains primarily your additions to the logical configuration.

 

The /config/bigip_base.conf contains primarily configurations objects related to network configuration which are typically not synchronized in a sync-failover device-group.

 

What´s wrong with the tcpdumps?

 

Thanks,

 

Stephan

 

Hi Stephan Will the below work? Condition has to be such that if pool is unavailable, then all traffic has to be forwarded to next hop.

           rule pbr-rule {

when CLIENT_ACCEPTED { log local0. "PBR iRule starting" if {[class match -- [IP::client_addr] equals subnet_bypass]} { if { [active_members pool_hop_1] < 1 } { log local0. "No active pool members so will forward to next-hop" } { forward } else {[class match -- [IP::client_addr] equals subnet_permit]}{ pool WHTTP_Transparent log local0. "PBR successful" } }

}

Hi Sumanta, I changed it a bit and added comments:

rule pbr-rule {
when CLIENT_ACCEPTED {
    log local0. "PBR iRule starting"
     client IP is from subnet_bypass and will be forwarded via pool_hop_1
    if {[class match -- [IP::client_addr] equals subnet_bypass]} {
         if pool_hop_1 has no members, connections will be forwarded according to routing table
        if { [active_members pool_hop_1] < 1 } { 
            log local0. "No active pool members so will forward to next-hop"
            forward
         if pool_hop_1 has available members, connections will be forwarded via pool_hop_1
        } else {
            pool pool_hop_1
        }
     client IP is from subnet_permit and will be forwarded via WHTTP_Transparent
    } elseif {[class match -- [IP::client_addr] equals subnet_permit]} {
        pool WHTTP_Transparent
        log local0. "PBR successful"
    }
}
}

Thanks, Stephan