Solved: Pix to asa 5510

mrehman02 · ‎05-22-2016

Dears, I am trying to upgrade my pix 515 to ASA 5510 . I have mostly copied the configuration but is stuck on one part where we have set the IP next hop in the pix. For some reason I cant find the SET IP NEXT HOP command in the asa. What could be the reason? Please advice

nspasov · ‎05-22-2016

So it seems like you are trying to running PBR (Policy Based Routing). This feature was not available in the ASA code until 9.4:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html

Unfortunately, ASA 5510 is End-of-Life/End-of-Sale and as a result, the latest version that it can run is 9.1. Thus, you should look into replacing that ASA with a next-generation model ASA (X series). This will allow you to run the desired code for PBR and will also give you the option(s) to run some next-generation features (NGIPS, Malware inspection, etc).

I hope this helps!

Thank you for rating helpful posts!

View solution in original post

nspasov · ‎05-22-2016

Hi there, can you post the exact syntax from the PIX?

Thank you for rating helpful posts!

mrehman02 · ‎05-22-2016

Hi, Please find it below.

route-map NETWORK-1 permit 10
set metric 2
set ip next-hop 10.40.60.5
match ip address 150
route-map NETWORK-1 permit 20
set metric 5
set ip next-hop 10.40.60.8
match ip address 160

nspasov · ‎05-22-2016

So it seems like you are trying to running PBR (Policy Based Routing). This feature was not available in the ASA code until 9.4:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html

Unfortunately, ASA 5510 is End-of-Life/End-of-Sale and as a result, the latest version that it can run is 9.1. Thus, you should look into replacing that ASA with a next-generation model ASA (X series). This will allow you to run the desired code for PBR and will also give you the option(s) to run some next-generation features (NGIPS, Malware inspection, etc).

I hope this helps!

Thank you for rating helpful posts!

mrehman02 · ‎05-22-2016

Thank you. That explains!!

nspasov · ‎05-22-2016

No problem. Sorry to bring the bad news :(

Thank you for rating helpful posts!