MicroNuggets: Policy-Based Routing (PBR) Explained

[@DebashishRoy-gn2lk]

Router here performing source lookup instead of destination lookup for path selection. Great content

[@waseembhatti2136]

Awesome...Kieth I have learnt tons from you and your best teaching skills. You make it so easy!!!!!!

[@ahmedabduljabar6269]

thanks Keith that was awesome in less then 7 min you refresh the PBR information .. Great Job

[@KeithBarker]

Ahmed Abduljabar You're welcome and thanks for the kind words! Glad you enjoyed this MicroNugget.

[@YosefVital]

Great explanation!!!

[@antreastsigkis4709]

very nice video. Is this configuration also working on VLAN interfaces ?meaning to set the IP policy route-map under vlan interface? thank you.

[@ajithm1138]

can we do the PBR for ODD and EVEN IP

[@SriRam-fk9fq]

short and sweet!

[@AA-bs1ig]

Can we use this security policy in multiple system

[@WisdomInExperience]

u made it easy for me, thanks

[@cbtnuggets]

Glad to hear that! Thank you!

[@jaelski1217]

It's always the ingress port? So it's not like the when setting up normal ACLs where you can assign whether it's for ingress, egress or local? Not doing this on a cisco router by the way, it's just the same concept when doing it on vyOS.

[@EyeIn_The_Sky]

is it possible to create a secondary gateway of last resort that is used based on matching traffic in a Policy-based route? I know the "IP next-hop" (checks PBR first then routing table) and "IP default next-hop" options are there but I want to know is how you get a second 0.0.0.0 0.0.0.0 that is only used by specified source subnets as per PBR. When I put in a second 0.0.0.0 0.0.0.0 I end up getting equal-cost load balancing and some strangeness which I don't want and if I add a cost to the second gateway of last resort to make it less desirable then it just vanishes from the routing table.

[@nullogs4468]

well it was a bit more complex then my current knowledge but it far beats a scatter brain teacher trying to teach it to me. Thanks

[@Jh-xo9yb]

Thank you sir

[@eforever27]

thnk you.

[@vishwasvishwakarma6272]

Great❤

[@mohamadzakwanmohdsubki4652]

so the PBR works only when R7 (source 7.7.7.7) going to R1 (1.1.1.1) right? If 1.1.1.1 to 7.7.7.7 its still choosing the shortest path not the PBR right?

[@mountainscott5274]

The original path was from R7 to R4 to R5 to R3 to R1. I'm not sure why that was the original path but that was probably explained in an earlier video on the original cbtnuggets course

[@MiD218]

Ok, first of all, I'm a complete stranger in networking and this short video just made this 100% clear. Also, the pace was perfect! One weirdly specific question tho. I have set up my Pi with Pihole and PiVPN. Since I'm blocking a lot of ads and trackers I want to keep my phone connected tothe Pihole at all times. Thankfully, PiVPN does that perfectly. However, since a couple of weeks I got a router with VPN capabilities so all devices I want on my network use the VPN connection (not PiVPN but a regular, paid VPN service). Everything works like a charm except that when I turn the VPN connection on on my router, my PiVPN loses all connections. Would this be a possible fix so I can use my phone to connect to my Pi via PiVPN and let all the internet traffic of my Pi (and other devices) use the VPN service via my router?

[@Bigfishnz]

great video, thanks, is there anyone know what the name of Cisco lab is the video maker using?

[@KeithBarker]

+Alvin Ding The graphics were made with Visio, and the lab itself was using GNS3.

[@amirmohammad8441]

thank you so much

[@Brian-nz6ns]

you sound so excited when you talk, don't know if that's on purpose or not, just the way you sound to me. I'm always thinking, what is he so excited about? Is this a super cool feature or something? It leaves me a little baffled because I think I'm missing something you're trying to communicate.

[@cbtnuggets]

Keith is always excited about training and networking! We think his passion is contagious and one of his many superpowers.