cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
923
Views
5
Helpful
2
Replies

PBR OR ROUTE MAP ON ASA

mumomutisya
Level 1
Level 1

Greetings community, 

 

I would like to set up routing on my ASA for about 80 subnets so that traffic to these subnets is routed to a specific interface. We would like to avoid using static routes so I need help in deciding the best alternative and also a sample config of how to achieve this. The device (ASA 5516, Version 9.8(2)) is new for a branch office so no configs on it yet. Default gateway will point to the internet facing interface of the firewall. 

 

As an example, I would like to route all traffic destined for 192.168.10.0/24, 10.100.90.0/24, 192.168.35.0/24 and 172.16.20.0/24 to interface GE 1/4 whose IP is 192.168.9.20 - without the use of static routes. 

 

Any help will be appreciated. Thank you in advance. 

 

Regards 

1 Accepted Solution

Accepted Solutions

balaji.bandi
Hall of Fame
Hall of Fame

you need align the default route and this route - since we do not know full config here is example ;

 

access-list PBR1 permit ip 92.168.10.0 255.255.255.0 any
10.100.90.0/24, 192.168.35.0/24 and 172.16.20.0/24  ( add as per above example)
!
route-map RT permit 10
match ip address PBR1
set ip next-hop 192.168.9.20
!
interface gi0/0   - change interface
policy-route route-map RT

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

you need align the default route and this route - since we do not know full config here is example ;

 

access-list PBR1 permit ip 92.168.10.0 255.255.255.0 any
10.100.90.0/24, 192.168.35.0/24 and 172.16.20.0/24  ( add as per above example)
!
route-map RT permit 10
match ip address PBR1
set ip next-hop 192.168.9.20
!
interface gi0/0   - change interface
policy-route route-map RT

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Thank you for the prompt response @balaji.bandi I will try this and advise within 24 hours.