Cisco 3560 select route path

[dakai.yan@dallasgrp.com]

1、There are 2 VLANs under swtich 3560, 172.31.15.0/24, 192.168.15.0/24. 2、Switch3560 connect ASA5510 and ISR 2911. 3、3560 default static route set to 2911. Users can access internal server use VPN anyconnect via ASA5505, but we can't access internal server via ASA NAT. How to fix it.Thank you. Dakai.

[fbabashahi]

Hi Dakai, switch & ASA configs please

[paul driver]

Hello

can you supply a smal topology diagram of this setup 

[dakai.yan@dallasgrp.com]

Thanks very much for your reply, Paul.

I have fixed it. I configured PBR at Switch3560,  and setup default route to ASA5510 and keep external user can access internal server via NAT map. And another VLAN route to ISR2911.

Thank you. 

Dakai.