topic Re: FTD-PBR in Network Security

FTD-PBR

Mahendervyas35821 — Tue, 09 Feb 2021 15:52:52 GMT

Hello Community

i am tryig to do PBR flex config in my lab environment .

1. I have 2 internal subnets 10.1.1.0 /24 and 192.168.1.0/24

2. i want 10.1 should take isp-1 and 192.168 should take ISP-2

3. did extended ACL and tried Flex config , but getting error while save Flex-config-object .

attached errors in attachment .

Thanks in advance for any support or suggestions .

Re: FTD-PBR

Rob Ingram — Tue, 09 Feb 2021 16:10:55 GMT

Hi @Mahendervyas35821

Route-map object creation in the FlexConfig object is blocked, but you can use route map objects defined in the object manager inside the template as variables.

Follow the instructions in the "How to configure Policy Based Routing" section.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/flexconfig_policies.html#reference_dhf_dyj_yx

Re: FTD-PBR

balaji.bandi — Tue, 09 Feb 2021 16:20:32 GMT

not sure variable splitting some errors, make sure there is no space or extra characted added.

follow below video step by step :

https://www.youtube.com/watch?v=lakHhw9CR5Y

Re: FTD-PBR

Mahendervyas35821 — Tue, 09 Feb 2021 16:24:04 GMT

Hi Rob ,

I followed this video on how to do .

https://www.youtube.com/watch?v=lakHhw9CR5Y&t=285s

iam not sure if i missed anything . as you said Route-map object creation is blocked how can i unblock this .

Sorry if i asked something wrong .

Re: FTD-PBR

Mohammed al Baqari — Tue, 09 Feb 2021 17:04:29 GMT

Hi,

Not sure what version you are using but its a version that support PBR then
flex config PBR won't be accepted.

See this.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-route-maps.html

***** please remember to rate useful posts

Re: FTD-PBR

Mahendervyas35821 — Wed, 10 Feb 2021 09:28:06 GMT

Hi @Mohammed al Baqari ,

iam using ftd 6.2.0 and fmc also 6.2.0

is there any docs to check which version support flex config with pbr .

Re: FTD-PBR

Mahendervyas35821 — Wed, 10 Feb 2021 09:31:52 GMT

hi @balaji.bandi

Followed exact same steps , iam not sure why this error throwing .

Re: FTD-PBR

Mohammed al Baqari — Wed, 10 Feb 2021 10:08:19 GMT

Hi,

6.2 doesn't support PBR of the box so flex should be working. Instead of
using variables '$' can you use absolute names and see if it works.

**** please remember to rate useful posts

Re: FTD-PBR

balaji.bandi — Wed, 10 Feb 2021 11:23:30 GMT

Not sure what version of FTD, may be old one dont like some syntax, as suggested, ratgher calling variable use direct command and test it.