3560 Route Map

[Stacey Hummer]

So, we are setting up a new ASA firewall, we currently have a Juniper firewall.

What I am trying to do is map on our core switch (3560) that any traffic from our mail server (inside) gets forwarded to the Juniper and all other traffic goes out the ASA. I know this shouldn't be hard and I'm probably over thinking it but I would appreciate any help.

So Juniper internal ip 10.2.0.1 mail server 10.2.0.92

ASA firewall internal ip 10.3.0.10

All traffic goes threw the 3560 @ 10.2.0.2 but the juniper is on one port and the ASA is on another port.

Thanks in advance

Stacey

[Jon Marshall · Accepted solution]

Hi Stacey

Normally you would use PBR for this but the mail server is in the same IP subnet as the Juniper assuming a /24 subnet mask.

Which would mean if you used PBR you would be sending traffic back out of the same interface it came in on ie the mail server sends traffic to it's default gateway on the 3750 and then the 3750 has to send it back out the same SVI because the Juniper is in the same subnet.

This may or may not work, I have seen both with L3 switches when you try this.

Is there any reason the default gateway of the mail server could not be changed to the Juniper firewall ?

Jon

[Stacey Hummer]

Jon,

Thanks for the info, yes, I didn't think about just changing the default gateway on the mail server itself. I will give that a go.
 

[Stacey Hummer]

Jon,

Thanks for the help, just changed the default gateway on the servers.