PBR doesn't work (it doesn't add port information into the ip rule commands). #18477
Open
2 tasks done
Labels
triage
Needs further investigation
Description
I configure PBR inside FRR. But I see no traffic following my PBR rules. It works when I use src-ip. And it doesn't work when I use src-port.
Version
How to reproduce
My config
`sho run
Building configuration...
Current configuration:
!
frr version 10.1.2
frr defaults datacenter
hostname test
no ip forwarding
no ipv6 forwarding
pbr nexthop-resolve
pbr table range 10000 20000
!
ip route 0.0.0.0/0 192.168.0.2
!
interface ens33
shutdown
exit
!
interface ens36
ip address 192.168.0.138/24
pbr-policy test
exit
!
interface lo
ip address 2.2.2.2/32
ip address 22.22.22.22/32
pbr-policy test
exit
!
nexthop-group test139
nexthop 192.168.0.139
exit
!
nexthop-group test141
nexthop 192.168.0.141
exit
!
pbr-map test seq 10
match src-port 80
set nexthop-group test139
exit
!
pbr-map test seq 20
match src-port 8080
set nexthop-group test141
exit
!
end`
Expected behavior
Traffic should obey to the PBR rules configured.
Actual behavior
Traffic doesn't obey to the PBR rules configured.
Additional context
As I can see, no information is translated into
ip rule
commands.ip rule
0: from all lookup local
309: from all iif ens36 lookup 10000 proto zebra
309: from all iif lo lookup 10000 proto zebra
319: from all iif ens36 lookup 10001 proto zebra
319: from all iif lo lookup 10001 proto zebra
32766: from all lookup main
32767: from all lookup default
Checklist
The text was updated successfully, but these errors were encountered: