Wired Intelligent Edge

Hi all,

I did lab test on EVE simulator  with Aruba 6300 running  ArubaOS-CX Virtual.10.06.0001.

On this core switch with 2 VRFs , stafff and quarantine.

I perform route-leak subnet of 30.30.30.0/24(Vlan30 / VRF quarantine) into VRF staff.

And also I applied policy based routing for source IP 10.64.129.0/24 inbound from VLAN1000 to redirected to 30.30.30.1 (VLAN 300)

The purpose is to PBR the source 10.64.129.0/24 to quarantine next-hop 30.30.30.1 which is firewall vsys for quarantine .

When I apply the policy , the interface VLAN 1000 showed an error messages.

I tried with reset the policy, it auto removed from interface vlan 1000 , then I re-apply policy again same messages showed on interface vlan1000.

Can help to point out what wrong with my configuration ? or just OS bug 

 ! policy Region-Quarantine-Policy user configuration does not match active configuration.
! run 'policy NAME reset' to reset policy to match active configuration.

Core-Switch# 

vlan 10
    name controller_staff
vlan 30
    name controller_quarantine
vlan 100
    name fw_staff
vlan 300
    name fw_quarantine
vlan 1000
    name MPE_staff

class ip Region-Quarantine-Subnet
    10 match any 10.64.129.0/255.255.255.0 any

pbr-action-list Region-Quarantine-PBR
    10 nexthop 30.30.30.1

policy Region-Quarantine-Policy
    10 class ip Region-Quarantine-Subnet action pbr Region-Quarantine-PBR

interface vlan 10
    vrf attach staff
    description peer with Controller
    ip address 192.168.10.1/24

interface vlan 30
    vrf attach quarantine
    description peer with Controller
    ip address 192.168.30.1/24
interface vlan 100
    vrf attach staff
    description Peer with PaloALto FW
    ip address 10.10.10.2/24

interface vlan 300
    vrf attach quarantine
    description Peer with PaloALto FW
    ip address 30.30.30.2/24

interface vlan 1000
    description Peer with MPE

vrf attach staff
    ip address 172.1.1.1/24
 ! policy Region-Quarantine-Policy user configuration does not match active configuration.
! run 'policy NAME reset' to reset policy to match active configuration.
    apply policy Region-Quarantine-Policy routed-in

ip route 0.0.0.0/0 30.30.30.1 vrf quarantine
ip route 10.64.129.0/24 172.1.1.2 vrf quarantine
ip route 100.30.30.0/24 192.168.30.2 vrf quarantine

ip route 0.0.0.0/0 10.10.10.1 vrf staff
ip route 10.64.128.0/24 172.1.1.2 vrf staff
ip route 30.30.30.0/24 vlan30 vrf staff
ip route 100.10.10.0/24 192.168.10.2 vrf staff

-------------------------------------------

Hi,
I'm experiencing the same issue with PBR on my simulator running version 10.15.
Since ACLs show the same behavior, it seems that the CX OS in the simulator does not support these features.

-------------------------------------------

You are correct that PBR is not supported on the CX Simulator, and the Feature Navigator specifies this as well.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Original Message:
Sent: Sep 10, 2025 12:16 AM
From: Se Hyun Kim
Subject: ArubaOS-CX - Policy Based Routing Error Messages

Hi,
I'm experiencing the same issue with PBR on my simulator running version 10.15.
Since ACLs show the same behavior, it seems that the CX OS in the simulator does not support these features.