topic Re: ASA Policy Based Routing alternative in Network Security

ASA Policy Based Routing alternative

chadtumaliuan — Mon, 11 Mar 2019 14:51:27 GMT

Guys,

I want to divert the traffic originating from E3(Server Farm) to E2 using some kind of route-map/PBR but found out that ASA doesnt support this. Is there any other way to accomplish this?

Thanks,

Chad

Re: ASA Policy Based Routing alternative

andrew.prince — Tue, 17 Feb 2009 12:26:29 GMT

Have a router perform the routing decision.

HTH>

Re: ASA Policy Based Routing alternative

Renato Morais — Thu, 16 Dec 2010 15:09:25 GMT

The ASA can perform Service Based Routing, but not source routing. For example, if you want to forward the outbound SMTP traffic through a secondary ISP:

route outside 0.0.0.0 0.0.0.0 192.0.2.254 1
route out-backup 0.0.0.0 0.0.0.0 172.16.0.254 2
nat (inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 interface
global (out-backup) 1 interface
static (out-backup,inside) tcp 0.0.0.0 smtp 0.0.0.0 smtp netmask 0.0.0.0

The static statement forces any SMTP traffic to be forwarded through the secondary ISP, even with the default route pointing to the ISP1 gateway.

Re: ASA Policy Based Routing alternative

Federico Coto Fajardo — Thu, 16 Dec 2010 15:22:57 GMT

Renato,

This is very clever I had no idea about that!

I give you +5 for it!! and thank you very much 😜

Federico.