Route specific traffic out backup ISP?

[drewdown]

We have dual ISP (ISP-A and ISP-B) and utilizting PBR which works just fine.  Now I have use case whereas I have a NAT configured on ISP-B (1 to 1) and I want to force traffic to a specific destination out the backup interface.  I want to do this to ensure traffic destined for a specific address IP-B is sent out the backup interface.  I tried adding a specific route on the VR with the interface and next hop as ISP-B but the path from behind the PAN still takes the primary interface and hop.  

I am missing something but not sure what?  

[BPry · Accepted solution]

@drewdown,

You'll want to configure a PBF (Policy-Based Forwarding) policy for something like this. 

[OtakarKlier]

Hello,

This is because the PBF takes affect prior to the virtual router. So do what @BPry suggested. Just make sure to put it higher in the list than your failover policy.

Regards,

[drewdown]

I just created a PBR for that source network and the specific destiantion IPand its at the top of my list. 

When I traceroute from the core behind the router I see the right path. 

traceroute 125.17.100.5 source vlan99
Type escape sequence to abort.
Tracing the route to 125.17.100.5
VRF info: (vrf in name/id, vrf out name/id)
1 10.10.2.5 1 msec 1 msec 1 msec
2 111.44.44.33 4 msec 3 msec 3 msec  (DG OF ISP-B)
3 14.142.20.129 6 msec 4 msec 5 msec
4 172.31.167.137 27 msec 23 msec 23 msec
5 172.31.167.46 21 msec 21 msec 20 msec

But from the PAN I don't see packets from that NAT going out or coming in.  The provider on the far end sees the packets with the SOURCE IP of my backup interface and not the NAT in question.  IE ISP-B interface 111.44.44.37 vs  1 to 1 NAT 111.44.44.38

So something is amiss but I don't know what.  

[OtakarKlier]

Hello,

Check the order of your NAT's, I suspect that its using the wrong one. I've been caught out by this a few times. 

Regards,