Solved

Policy Based Routing

Posted on 2009-07-06
4
185 Views
Last Modified: 2012-05-07
I have two networks built at one of my remote offices. 10.80.33.0/24 is on my MPLS link to corporate. 192.168.100.0/24 goes out a local T1 for internet access. I want to route all web traffic (port 80) from the 10.80.33.0 network out over the T1 on the 192.168.100.0/24 network. there is an ISA proxy on the 192 network between the internet router and the 192 network.
0
Comment
Question by:dtadmin
  • 2
  • 2
4 Comments
 

Author Comment

by:dtadmin
ID: 24789121
I have attached a diagram of the network involved with this posting.
network.JPG
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 24791225
Will the ISA Proxy allow the 10.80.33.x network to bypass it for www access? If not, simply set the proxy settings on any hosts on the 10.80.33.0 network
A route-map can easily forward the traffic, but not if the ISA won't allow it through, and I assume from your diagram that it is also doing NAT, so it has to be configured to nat the 10.80.33.0 network, needs a route to the 10.80.33.0 network pointing to 192.168.100.2

I can help with the route-map, but not the ISA config

access-list 121 permit tcp 10.80.33.0 0.0.0.255 any eq www
route-map WWW permit 10
 match ip address 121
 set ip next-hop 192.168.100.1
interface fe0/0.1
 ip policy route-map WWW

0
 

Author Comment

by:dtadmin
ID: 24793146
are you assuming the ISA box is 192.168.100.1 in the config above?
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 24799709
I was assuming that the ISA is the default gateway for the 192.168.100.x network, and that its network IP is 192.168.100.1... substitute appropriately to fit your layout.

Thanks!
0

Featured Post

Building an interactive eFuture classroom

Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ASA 5505 not passing traffic to Netgear router 22 76
Resource timeout across a VPN 9 31
Network Switches 3 47
Advice on router and switch 25 44
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question