topic Re: Questions PRB in Firewall and Security Management

Questions PRB

Carlos_Silva — Fri, 12 Oct 2018 22:37:30 GMT

Hello friends, how are you?
Can someone help me?
Regarding the topology below, it follows some questions.

Server 10.28.4.100 must be routed via PBR. The 10.28.4.101 server must access the Internet through the local link.
My suggestion for PBR routing is:

set pbr table ROUTERMPLS static-route default nexthop gateway address 10.28.201.100 priority 1
set pbr rule priority 1 match from 10.28.4.100/32
set pbr rule priority 1 action table ROUTERMPLS

In the opinion of friends, is that correct?

Re: Questions PRB

PhoneBoy — Sat, 13 Oct 2018 08:33:09 GMT

If your goal is to route "internet-bound" traffic from that one host over the MPLS link, I believe you have it correct.

Re: Questions PRB

Carlos_Silva — Sat, 13 Oct 2018 12:42:13 GMT

Hello Dameon, thanks for your answer.

Note that NAT occurs in a cluster that is not in the same location as the server.
The requisitions will arrive in another location and should be directed to the same place that they arrived.
The default gateway for other devices in the locality is the local link.
Thank You.