Device: N3048 version: 6.5.4.18

I'm doing PBR on a vlan to route out a secondary ISP as describing in the PBR Guide. This works fine. On this vlan, I also need to implement port restrictions to other vlans. If I add a access-group to the vlan interface, the route-map stops working, even if the access-group only has one entry to permit everything. Is there a trick to get this to work?

 

interface vlan 3
ip address 172.27.3.1 255.255.255.0
ip helper-address discard dhcp
no ip redirects
ip policy route-map equal-access
ip access-group dmz-access in 1
exit

 

route-map "equal-access" deny 10
match ip address inter-communications
exit
route-map "equal-access" permit 20
match ip address dmz-twc-hosts
set ip default next-hop 172.27.12.3
exit