1. ASA Management Interface in correct VLAN and subnet
2. Cisco 4507R Switch with routing turned on and multiple VLANS
a. Management workstations(VLAN 222, 10.10.34.64/27) need to access the Management network (VLAN 998, 10.10.34.0/26) via the ASA
b. No Access unless the traffic passes the ASA
3. Need to set up PBR on the 4500 so that when a host on the 10.10.34.64 network tries to access a host on the 10.10.34.0 network it is routed to the ASA and then to the host and not routed from VLAN interface to the other.
Here is example of my thoughts on configuration
Policy Based Routing
ip access-list ext MGT_TRAFFIC
permit ip any 10.10.34.0 0.0.0.63
route-map MANAGEMENT permit 10
match ip address MGT_TRAFFIC
set ip next-hop 10.10.60.1
interface vlan 222
ip policy route-map MANAGEMENT
---------- -------------------------
ip access-list ext MGT_OUT
permit ip 10.10.34.0 0.0.0.63
route-map MGTOUT permit 11
match ip address MGT_OUT
set ip next-hop 10.10.34.1
interface vlan 998
ip policy route-map MGTOUT
