FTD-PBR

[Mahendervyas35821]

Hello Community

i am tryig to do PBR flex config in my lab environment . 

1. I have 2 internal subnets 10.1.1.0 /24 and 192.168.1.0/24 

2. i want 10.1 should take isp-1 and 192.168 should take ISP-2

3. did extended ACL and tried Flex config , but getting error while save Flex-config-object . 

attached errors in attachment . 

Thanks in advance for any support or suggestions . 

[Rob Ingram]

Hi @Mahendervyas35821 

Route-map object creation in the FlexConfig object is blocked, but you can use route map objects defined in the object manager inside the template as variables.

Follow the instructions in the "How to configure Policy Based Routing" section.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/flexconfig_policies.html#reference_dhf_dyj_yx

[Mahendervyas35821]

Hi Rob , 

I followed this video on how to do . 

https://www.youtube.com/watch?v=lakHhw9CR5Y&t=285s

iam not sure if i missed anything . as you said Route-map object creation is blocked how can i unblock this . 

Sorry if i asked something wrong .

[balaji.bandi]

not sure variable splitting some errors, make sure there is no space or extra characted added.

follow below video step by step :

https://www.youtube.com/watch?v=lakHhw9CR5Y

[Mahendervyas35821]

hi @balaji.bandi 

Followed exact same steps , iam not sure why this error throwing .

[balaji.bandi]

Not sure what version of FTD, may be old one dont like some syntax, as suggested, ratgher calling variable use direct command and test it.

[Mohammed al Baqari]

Hi,

Not sure what version you are using but its a version that support PBR then
flex config PBR won't be accepted.

See this.

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-route-maps.html


***** please remember to rate useful posts

[Mahendervyas35821]

Hi @Mohammed al Baqari  ,

 iam using ftd 6.2.0 and fmc also 6.2.0

is there any docs to check which version support flex config with pbr . 

[Mohammed al Baqari]

Hi,

6.2 doesn't support PBR of the box so flex should be working. Instead of
using variables '$' can you use absolute names and see if it works.

**** please remember to rate useful posts