topic Hi Mohamed, in Network Security

PBR on ASA version 8.2

mohamed.fawzy2012 — Tue, 12 Mar 2019 07:36:28 GMT

Dears ,

i have ASA version 8.2 and connected to ADSL modem and i am direct lan user to this interface

int eth 0/1

nameif outside

ip address x.x.x.1

route outside 0.0.0.0 0.0.0.0 x.x.x.2

nat (inside) 1 172.16.100.0 255.255.255.0

global(outside) 1 interface

now i connected another ADSL modem on port ether 0/3 and i have wireless user i want to direct them to this interface

int eth 0/3

ip address y.y.y.1

nameif internet

nat (inside) 2 192.168.1.0 255.255.255.0

global (internet) 2 interface

route outside 0.0.0.0 0.0.0.0 y.y.y.2

but it is not working , kindly is there any solution

Aditya Ganjoo — Mon, 11 Apr 2016 13:37:29 GMT

Hi Mohamed,

PBR on ASA is supported on 9.4 and above codes.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/route-policy-based.html

Regards,

Aditya

Please rate helpful posts and mark correct answers.

mohamed.fawzy2012 — Mon, 11 Apr 2016 14:16:02 GMT

hi Aditya ,

is there any other solution for this problem on ASA version 8.2 , as i want to use both adsl modem

Aditya Ganjoo — Mon, 11 Apr 2016 14:41:10 GMT

Hi Mohamed,

Unfortunately source based routing is not supported on this code.

Yes if we are sending two sets of traffic through these interfaces we could go for static NAT's.

For instance if we need only HTTP traffic through first interface and HTTPS through the ADSL we can create specific static NAT's for them.

But if we want all the traffic being passed through both these interfaces then it will not be supported.

Regards,

Aditya

Please rate helpful posts and mark correct answers.