Cisco ASA policy based routing on IPSec VPN

[yong khang NG]

Hi all,

Is Cisco ASA PBR support the traffic route thru IPsec S2S VPN tunnel interface?

I am planning traffic that include in the interesting traffic all route via one physical interface (as this interface use for IPSec VPN), the rest route via another physical interface

Is it possible?

Thanks

Noel

[Francesco Molino]

Hi

I'm sorry but i don't understand your question. I know you're want to do PBR but nothing more.
Can you please elaborate more?

If i answer based on your post title, yes you can do PBR to send traffic to vpn but i believe this want the question.

[Dennis Mink]

IPSEC VPNs are used based on interesting traffic, defining source and destination IP addresses, so in essence the are already using PBR.

[Florin Barhala]

He mentioned his question is about IPSEC VTIs or IPSEC interface mode.
Now I just looked over 9.9 documentation for PBR Guidelines and there's no mention about VTIs so I would assume it should work.

[Francesco Molino]

Yes and that's why I asked to clarify a bit because if it's Policy based VPN I don't see the need as @Dennis explained. And if it's route based VPN, then yes it works.