troubleshooting Question

Trying to set a policy based route map on catalyst 5750 to handle port 80 redirect

Avatar of paxied
paxied asked on
Hardware Firewalls
2 Comments1 Solution344 ViewsLast Modified:
I am trying to configure a rule on my router that will force all port 80 traffic except that which is coming from a specific list of IP addresses. I am currently looking at route-maps. I have not found a way to set up the policy to refference first one then another list and assign a route based on which one made a hit. Since there cannot be more than one policy in effect on any given interface, I cannot simply create on policy and give it a lower numerical value than the other to assign precedence.

Currently I have an ACL with a test IP and a route-map policy that redirects any and all port 80 traffic from said IP to my proxy server. This works fine, but in order to implement it I have to assign the policy to the gateway port for that vlan. We have a few web servers running on the same VLAN as some of our users computers and cannot have the traffic from the web-servers being run through a proxy server. We are trying to do this without having to restructure our VLANs.

when configuring a route-map I am using the following

access-list 168 permit tcp host X.X.X.X any eq 80

route-map redirect permit 10
match ip address 168 (168 being the acl containing the permission list identifying the IP's that are to be assigned this rule)
set ip next-hop X.X.X.X
exit

int gi */* ip policy route-map redirect
exit
exit
Am I following the wrong track here? I have a default gateway configured and it is correct. I would think that lacking a hit on the above ACL it would follow the default gateway.
ASKER CERTIFIED SOLUTION
bec0s

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Log in to continue reading
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform for $9.99/mo
View membership options
Unlock 1 Answer and 2 Comments.
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
The Value of Experts Exchange in My Daily IT Life

Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>

Mike

Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 2 Comments.
View membership options
“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck

Member since 2004