02-01-2022 03:32 AM - edited 02-01-2022 03:33 AM
I have branches that connect to me through ASA then into my core through static route, I need to apply PBR so that they are directed to a proxy, if i apply a route map on the interface on my core connected to the asa inside can i only divert my S2S traffic? Im very worried because i have a big network and any mistake might bring the whole thing down. so let us say my S2S subnet is 192.168.1.0/24 can i do the following so that only this subnet is diverted not any other traffic?
ip access-list extended Branch-Users
permit ip 192.168.1.0 0.0.0.255 any
deny ip any any
!
route-map test permit 1
match ip address Branch-Users
set ip next-hop ""proxy ip""
then i add this route map under the interface that connects to the ASA inside
02-01-2022 03:55 AM
Hi
It seems correct to me. One advise. Using some simulator like GNS3, which is very simple to use, try to test before implement considering you are not comfortable with that.
Since your traffic is going through ASA, you can also take a look on the protocol WCCP . It might allow you a better implementation of the same task.
02-01-2022 06:23 AM
just to clear
ASA-Core-Subnet"A"
ASA have S2S from Subet"A" to branch ?
02-01-2022 04:44 PM
https://www.petenetlive.com/KB/Article/0000982
check this link may be it help you to solve your issue.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide