Policy Based Routing Feature in ASA

amjad_mus — Tue, 12 Mar 2019 03:23:59 GMT

Hi All

I know that the old versions of ASA does not support PBR, and as workarround we may use multiple contexts with different routing (not a good solution). HOwever do we have this feature available now in V9.0 and are Cisco planning to have such feature.

Thanks in advanced

Policy Based Routing Feature in ASA

Marvin Rhoads — Thu, 02 Jan 2014 08:36:58 GMT

No, there is still no PBR as of ASA software 9.1(4) (= the latest as of this posting).

I have not heard of it being added to upcoming releases.

We steer customers with ASAs and PBR needs to use upstream routers with the full set of IOS features available on them.

I try to avoid anything but the most basic routing on an ASA the rare many limitations an ASA has as a router.

Update - PBR is on the ASA

Marvin Rhoads — Mon, 09 Mar 2015 17:50:44 GMT

Update - PBR is on the ASA roadmap. Look for it in 9.4.

Policy Based Routing is now

mwenstro — Tue, 28 Apr 2015 20:34:33 GMT

Policy Based Routing is now available in Cisco ASA software version 9.4(1).

See the New Features section in the Release Notes, under Routing Features:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116518

Policy Based Routing (PBR) is a mechanism by which traffic is routed through specific paths with a specified QoS using ACLs. ACLs let traffic be classified based on the content of the packet’s Layer 3 and Layer 4 headers. This solution lets administrators provide QoS to differentiated traffic, distribute interactive and batch traffic among low-bandwidth, low-cost permanent paths and high-bandwidth, high-cost switched paths, and allows Internet service providers and other organizations to route traffic originating from various sets of users through well-defined Internet connections.

See more at: https://supportforums.cisco.com/document/30251/cisco-asa-policy-based-routing#sthash.y9fyiUjM.dpuf

Policy Based Routing is now available in Cisco ASA software version 9.4(1).

See the New Features section in the Release Notes, under Routing Features:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116518

- See more at: https://supportforums.cisco.com/document/30251/cisco-asa-policy-based-routing#sthash.y9fyiUjM.dpuf

Policy Based Routing is now available in Cisco ASA software version 9.4(1).

See the New Features section in the Release Notes, under Routing Features:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116518

- See more at: https://supportforums.cisco.com/document/30251/cisco-asa-policy-based-routing#sthash.y9fyiUjM.dpuf

Policy Based Routing is now available in Cisco ASA software version 9.4(1).

See the New Features section in the Release Notes, under Routing Features:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116518

- See more at: https://supportforums.cisco.com/document/30251/cisco-asa-policy-based-routing#sthash.y9fyiUjM.dpuf

From the posted documents,

antienho — Thu, 25 May 2017 18:26:48 GMT

From the posted documents, the debug does not seems able to show the traffic been "NAT" through the ASA. Is there a way to show the PBR flow been "NATed" after the PBR-ACL capture the interesting traffic at the Interface?

Or should we use "packet-tracer" to check it/

Thanks

Antien

Packet-tracer is the most

Marvin Rhoads — Fri, 26 May 2017 04:37:20 GMT

Packet-tracer is the most reliable method (apart from capturing at an upstream device).

Hi Marvin,

antienho — Fri, 26 May 2017 12:31:15 GMT

Hi Marvin,

thank you... just wondering if there is a packet process flow diagram to illustrate in ASA. It will help to understand and trouble shoot.

Thanks again.

Antien

You're welcome.

Marvin Rhoads — Fri, 26 May 2017 15:56:29 GMT

You're welcome.

Sure - here is a current example (open image in new tab to zoom):

Source:

https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=90865

topic Policy Based Routing is now in Network Security

Policy Based Routing Feature in ASA

Policy Based Routing Feature in ASA

Update - PBR is on the ASA

Policy Based Routing is now

From the posted documents,

Packet-tracer is the most

Hi Marvin,

You're welcome.