Mohamed

I can't read your .vsd so i may be misunderstanding but it sounds like you need policy routing eg.

vlan 10 = 10.10.100.x

vlan 20 = 10.10.200.x

ASA2 internal interface - 172.16.2.2

access-list 101 permit ip 10.10.100.0 0.0.0.255 any

access-list 101 permit ip 10.10.200.0 0.0.0.255 any

route-map INTERNET permit 10

match ip address 101

set ip next-hop 172.16.1.2

route-map INTERNET permit 20

match ip address 102

set ip next-hop 172.16.2.2

int vlan 10

ip policy route-map INTERNET

int vlan 20

ip policy route-map INTERNET

NOTE - the above will do what you want for Internet traffic but not for routing internally. You need to modify the access-lists to exclude vlan internal routing ie. you don't want traffic from 10.10.100.x going to 10.10.200.x going via the ASA1 device. So either

1) explicitly add in your internal vlans to the access-list with deny statements

OR

2) remove the default-route from your BB switch and then instead of "set ip next-hop" use "set ip default next-hop" which means the routing table is checked first before PBR. Because your BB switch should have routes for all internal networks these would used first but all external networks would not be in the routing table and so would use the PBR.

The above would only work if the default-route is not needed for anything else ie. other vlans routing out the Internet.

Jon