ASA Policy Based Routing alternative

chadtumaliuan · ‎02-17-2009

Guys,

I want to divert the traffic originating from E3(Server Farm) to E2 using some kind of route-map/PBR but found out that ASA doesnt support this. Is there any other way to accomplish this?

Thanks,

Chad

andrew.prince · ‎02-17-2009

Have a router perform the routing decision.

HTH>

Renato Morais · ‎12-16-2010

The ASA can perform Service Based Routing, but not source routing. For example, if you want to forward the outbound SMTP traffic through a secondary ISP:

route outside 0.0.0.0 0.0.0.0 192.0.2.254 1
route out-backup 0.0.0.0 0.0.0.0 172.16.0.254 2
nat (inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 interface
global (out-backup) 1 interface
static (out-backup,inside) tcp 0.0.0.0 smtp 0.0.0.0 smtp netmask 0.0.0.0

The static statement forces any SMTP traffic to be forwarded through the secondary ISP, even with the default route pointing to the ISP1 gateway.

Federico Coto Fajardo · ‎12-16-2010

Renato,

This is very clever I had no idea about that!

I give you +5 for it!! and thank you very much ;p

Federico.