topic Re: FTD and PBR with two default gateways in Network Security

FTD and PBR with two default gateways

Chess Norris — Fri, 29 Jul 2022 13:04:19 GMT

Hi,

Is it possible to use BPR in FTD and route traffic to different gatways based on source networks?

I have two interfaces configured in the FTD, both are on different /28 public subnets. I also have about 30 private subnets, each on its own subinterface. Let's say I want to route traffic from 10 of those private subnets to the first gateway and the rest of the subnets to the other gateway. Would this be possible by using PBR or do I need to use VRFs to achive this?

Thanks

/Chess

Re: FTD and PBR with two default gateways

Rob Ingram — Fri, 29 Jul 2022 13:12:35 GMT

Hi @Chess Norris yes, PBR will do that for you. Example here:- https://integratingit.wordpress.com/2021/04/18/ftd-policy-based-routing

PBR functionality was only added natively (without using flexconfig) in the recently released version 7.2

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72/features.html

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/routing-policy-based.html

Re: FTD and PBR with two default gateways

MHM Cisco World — Fri, 29 Jul 2022 13:11:13 GMT

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/217588-configure-pbr-with-ip-slas-for-dual-isp.html
check this link

Re: FTD and PBR with two default gateways

Chess Norris — Fri, 29 Jul 2022 13:16:52 GMT

Great to know that it works and thanks a lot for the links.

/Chess