03-07-2012 11:03 AM - edited 03-07-2019 05:25 AM
I have two ISPs. Each is on it's own subnet connected to the 6509 MSFC/Switch. FW1 is on 100.1.100.0/30 and FW2 is on 200.1.200.0/30 subnet.
My goal is route all traffice going to the Internet from subnet 10.133.3.0/24 to FW1 and all other subnets across the organization to FW2.
I am not sure if I need to use ACL / Static route combo, or just a static routes or ACLS?
Any ideas / suggestions appreciated.
03-07-2012 11:39 AM
You want to configure Policy Based Routing (PBR).
http://www.cisco.com/en/US/products/ps6599/products_white_paper09186a00800a4409.shtml
Ven
03-07-2012 01:41 PM
Yes policy routing is the answer, you basically have two default routes to the Internet. You need to have the route maps take traffic to FW1 and have it as next hop on your route map statement on the 6509. Then you would do the same thing for the traffic from your other subnet destined for FW2. The route map would have the FW2 as the next hop for all traffic from subnets that you would want to go out FW2.
03-07-2012 03:07 PM
Can you give me any configuration examples?
03-08-2012 05:24 AM
Here's a link with a step by step on how to configure it.
I'm a big fan of the "teach a man to fish" method. Take a little time and use this guide to configure your PBR.
You'll be the better engineer for it.
Ven
03-08-2012 06:09 AM
The link that Ven sent is all you 'll need, just remember you'll need to
identify your source address with the FW that you need the data to go out.
Jeff Johnson
From: "ven.taylor"
To: jefferyj40
Date: 03/08/2012 07:25 AM
Subject: - Re: LAN Default gateway
Home
Re: LAN Default gateway routing
created by Ven Taylor in LAN, Switching and Routing - View the full
discussion
Here's a link with a step by step on how to configure it.
http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfpbr_ps1835_TSD_Products_Configuration_Guide_Chapter.html
I'm a big fan of the "teach a man to fish" method. Take a little time and
use this guide to configure your PBR.
You'll be the better engineer for it.
Ven
Reply to this message by going to Home
Start a new discussion in LAN, Switching and Routing at Home
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide