topic Re: PBF monitor behavior not working in General Topics

PBF monitor behavior not working

gmunoz — Mon, 11 Jun 2018 18:41:32 GMT

Hello, i'm configuring two PBF in order to isolate traffic between two destinations servers on two different ISP (without fail-over).

I have configured the PBFs with a monitor profile with Wait Recover option enabled.

I see that the traffic is being properly splitted by the PBFs, but when I simulate an ISP failure the traffic of the failing ISP passes to the other ISP instead of drop until the failing ISP recovers, what am I doing wrong?

Re: PBF monitor behavior not working

Remo — Mon, 11 Jun 2018 20:18:35 GMT

Removed

Solution see below from @OtakarKlier

Re: PBF monitor behavior not working

gmunoz — Mon, 11 Jun 2018 19:47:41 GMT

I tried with no monitor profile first, and the result was the same. After that I've tried enabling the monitor prof.

Re: PBF monitor behavior not working

OtakarKlier — Mon, 11 Jun 2018 20:12:10 GMT

Hello,

Leave the monitor on and make sure the check box for 'Disable the rule if nexthop/monitor ip is unreachable' is not checked. Also do not enter a Next Hop IP.

Regards,

Re: PBF monitor behavior not working

gmunoz — Mon, 11 Jun 2018 20:17:56 GMT

I've also tried that and didn't work. Is any kind of "permanent static route" like in cisco's routers?

Re: PBF monitor behavior not working

OtakarKlier — Tue, 12 Jun 2018 18:45:00 GMT

Hello,

If the PBF rule is set to monitor and then disable, the packets will take the route of another PBF rule, if there is one, or the virtual router. PBF rules take place prior to the Virtual Routers so that is where it might be using hte routes. As stated previously, make sure the PBF rules is not set to disalbe.

Regards,