cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

173
Views
0
Helpful
1
Replies
dcountryman68
Enthusiast

Policy Based Routing on ASA - if the DSCP is set to 46 then set next-hop

I have a requirement to do a PBR on a firewall if the traffic has the dcsp set to 46.

I can have accomplished this on a Switch/router, just need to determine if I can do this on a Cisco ASA 5506.

Has anyone attempted or accomplished this.

Here is the config I used for the Switch:

ip access-list extended Skype_Policy_Routing

 remark Skype Policy Routing for Charlotte

 permit ip 10.1.10.0 0.0.0.255 10.10.15.0 0.0.0.255 dscp ef

 permit ip 10.1.20.0 0.0.0.255 10.10.15.0 0.0.0.255 dscp ef

 permit ip 10.1.30.0 0.0.0.255 10.10.15.0 0.0.0.255 dscp ef

 permit ip 10.1.41.0 0.0.0.255 10.10.15.0 0.0.0.255 dscp ef

 remark Skype Policy Routing for Cary

 permit ip 10.1.10.0 0.0.0.255 10.10.38.0 0.0.0.255 dscp ef

 permit ip 10.1.20.0 0.0.0.255 10.10.38.0 0.0.0.255 dscp ef

 permit ip 10.1.30.0 0.0.0.255 10.10.38.0 0.0.0.255 dscp ef

 permit ip 10.1.41.0 0.0.0.255 10.10.38.0 0.0.0.255 dscp ef

 

Route-map Skype_Policy_Routing permit 10

 match ip address Skype_Policy_Routing

 set ip next-hop 10.1.99.2

 

Route-map Skype_Policy_Routing permit 20

 

Thank you in advance for any assistance.

1 ACCEPTED SOLUTION

Accepted Solutions
Dennis Mink
Advisor

for starters you will need to run 9.4.x on your ASA

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116518

check the article under routing features, PBR is possible from that version

Please remember to rate useful posts, by clicking on the stars below.

View solution in original post

1 REPLY 1
Dennis Mink
Advisor

for starters you will need to run 9.4.x on your ASA

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html#pgfId-116518

check the article under routing features, PBR is possible from that version

Please remember to rate useful posts, by clicking on the stars below.

View solution in original post

Content for Community-Ad