Ruckus ICX - Policy Based Routing (PBR)

Purpose

The purpose of this guide is to demonstrate how to implement policy based routing (PBR).

PBR is useful when you have a scenario where by you need specific traffic to route via a different internet connection or gateway, in the example below an entire subnet has been routed via a different gateway however there is no reason why it couldn't be limited to a specific protocol such as HTTP.

Tested on version 08.0.80

Pre-Requisite

The switch must be on the routing firmware on version 08.0.80

Policy Based Routing requires a layer 3 Premium License.

To identify if you have this already use the command "show license".

Configuration

This must be completed in privileged exec mode

Define the Primary Connection

• vlan 60
• router-interface ve 60
• exit
• interface ve 60
• ip address 172.60.100.2 255.255.248.0
• Exit
• Ip route 0.0.0.0 0.0.0.0 172.60.100.1  <<< Sets the primary Gateway of Last Resort

Define the Secondary Connection

• vlan 40
• router-interface ve 40
• exit
• interface ve 40
• ip address 10.40.200.2 255.255.252.0
• exit

Define the subnet you wish to route via the secondary connection

•  
• router-interface ve 50
• exit
• interface ve 50
• ip address 172.50.100.2 255.255.255.0
• exit

Define the Route Map and ACL

• ip access-list extended RouteMap-ACL
• sequence 10 permit ip 172.50.100.0 0.0.0.255 any
• sequence 20 deny ip any any
• exit
• route-map RouteMap permit RouteMap-ACL
• match ip address RouteMap-ACL
• set next-hop 10.40.200.1 <<< Secondary Connection of the next hop router

Bind the Route Map to the subnet you wish to go out of the Secondary Connection

• interface ve 50
• ip policy route-map RouteMap
• exit