topic Re: Policy based routing in Network Security

Policy based routing

RexPr — Fri, 21 Feb 2020 16:19:17 GMT

Following documentation (https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/route-policy-based.html) I'm trying to configure policy based routing on ASA 5506-X (9.8).
The steps seem are simple:
- define access list
- define route-map
- match ip address to acl
- set next hop
then associate to interface:
- interface GigabitEthernet 1/x
policy-route route-map ...

but after entered on interface config policy-route route-map command doesn't exist.
This is the help:
CiscoAsa(config-if)# policy-?

configure mode commands/options:
policy-list policy-map

there is no policy-route command.

where is my mistake?

Thanks,
Fabrizio

Re: Policy based routing

Roy Harrington — Wed, 03 Oct 2018 23:58:55 GMT

Can you provide the output from "show ver | i plat|image"

Re: Policy based routing

RexPr — Thu, 04 Oct 2018 05:53:52 GMT

CiscoASA# show ver | i plat|image
System image file is "disk0:/asa982-lfbff-k8.SPA"
Licensed features for this platform:
This platform has a Base license.
Costa-PR#

Re: Policy based routing

mkazam001 — Sun, 04 Nov 2018 00:07:14 GMT

perhaps it requires a security plus license?

azam

Re: Policy based routing

RexPr — Sun, 04 Nov 2018 09:31:37 GMT

Solved. The problem was the use of BVI.

Policy based rules are not working with an interface based on BVI.