04-24-2008 08:10 AM - edited 03-03-2019 09:41 PM
we currently have 2 asa's 5505 and a 5510 each connected to a isp which connect inside to a single 3640 we have the default route set to go out one isp and vpn traffic to go out the other. we have some route map polies in place for specific machines running web services to go out the non-default route. Those specific machines when accessed internally on the same ports fail since it's sending the traffic out using the route-map is there a way to filter these machines to send the traffic the appropriate directions.
04-24-2008 12:52 PM
Hello,
Create a new ACL that matches traffic from those Webservers to the destinations/subnets that do not have to be routed through the Route-map.
Then add the below to the route-map
route-map xxxxx deny 1
match ip address "ACL Created above"
This will deny traffic matching the ACL to be policed.
Hope this helps,
Appreciate your rating,
04-24-2008 12:58 PM
Would be nice to have a quick topology diagram and explain what exact hosts need to go where. Then we can go over your config.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide