11-16-2016 06:12 PM - edited 03-05-2019 07:29 AM
Hi All,
I want to ask something. Our client want to have 2 different Internet connection, 1 is for Internet access only and 1 is for IPVPN. They want that if the user is using specific application like SAP then the route will be going to IPVPN and if using other like normal browsing then use the Internet access. Now, I am confused how to do it on my ASA 5525-x firewall or in my 2960X switch that act as a core switch. Can you please help me if this is possible and how to do it. Can I use the 2960X act as Core switch or use their ASA 5525-X. Attached is their proposed Network Diagram. Appreciate your help. God Bless.
11-16-2016 08:10 PM
11-16-2016 08:35 PM
Hi, Thank you for response.
Actually I already told them why didn't use a router and they used as core switch is only 2960X. But the client don't want to buy a router. I'm thinking to do the PBR on the Firewall ASA 5525-X. Do you think it's possible and asa can do it?
thanks.
11-16-2016 10:34 PM
hi,
yes, i believe ASA 9.4 is now supports PBR.
you'll just have to re-design/re-configure the core switch VLANs/SVIs and make the ASA 5525-X as the gateway and do PBR.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide