I need help configuring PBR (Policy-Based Routing) on Cisco FMC/FTD in a scenario without change a exist default route and using two WAN links with ECMP.
My goal is:
To use PBR on the inside interface to steer traffic to two different next-hops (two ISPs).
To have both links configured with ECMP, using two static routes with equal metrics.
To operate without a global/default route in the routing table, relying only on the PBR next-hop definitions and ECMP behavior.
Questions:
When PBR is configured on the inside interface, does the FTD require a default route, or is it enough that the next-hop defined in PBR exists in the RIB (even if there is no global default route)?
Are there any limitations on using PBR + ECMP together on the same FTD device?
My intended configuration:
Two WAN interfaces: outside1 and outside2
PBR rules on the inside interface:
Part of the traffic routed to next-hop 200.x.x.x
Another part routed to next-hop 201.x.x.x
I want to confirm that this design is supported and understand any restrictions, caveats, or recommended best practices for using PBR + ECMP on FTD when no default route is configured.
Thanks!
